Best Practices from Oracle Development's A‑Team

Oracle GoldenGate: How to Configure On-Premises to GoldenGate Cloud Services (GGCS) Replication with Corente VPN

Mike Papio
Principal Solution Architect


Important Update as of 20171201: There's a new article that covers an updated procedure on how to setup OPC Cloud Gateway VPN using Corente. The article's title is

This document will walk you through how to configure Oracle GoldenGate replication between On-Premises to GoldenGate Cloud Service (GGCS) on Oracle Public Cloud (OPC) via Virtual Private Network (VPN) using Corente Services Gateway (CSG).

The high level steps for this replication configuration are as follows:

  • Creation of SSH Public/Private Key Files
  • Provisioning of Database Cloud Service (DBCS) which is a pre-requisite of GGCS
  • Provisioning of GoldenGate Cloud Service (GGCS)
  • On-Premises Corente Services Gateway Configuration and Setup
  • Provisioning of Compute Instance for OPC Corente Services Gateway
  • On-Premises and OPC Corente VPN Tunnel configuration
  • GGCS VPN Tunnel Configuration via Generic Routing Encapsulation (GRE) protocol
  • On-Premises and GGCS GoldenGate Sample Replication Configuration

Note: Provisioning Resources in this article requires Oracle Cloud and Corente VPN credentials. If you don't have one, please contact your Oracle Sales Representative.

The following assumptions have been made during the writing of this article:

  • The reader has a general understanding of Windows and Unix platforms.
  • The reader has basic knowledge of Oracle GoldenGate products and concepts.
  • The reader has a general understanding of Cloud Computing Principles
  • The reader has basic knowledge of Oracle Cloud Services
  • The reader has a general understanding of Network Computing Principles

Important Update as of 20171201: This article is being obsoleted. There's a new article that covers an updated procedure on how to setup OPC Cloud Gateway VPN using Corente. In case you land on this old article, please go to the following new article:

GoldenGate Cloud Service (GGCS): Replication from On-Premises to Oracle Public Cloud (OPC) via Oracle Cloud Gateway VPN

Main Article

The GoldenGate Cloud Service (GGCS), is a cloud based real-time data integration and replication service, which provides seamless and easy data movement from various On-Premises relational databases to databases in the cloud with sub-second latency while maintaining data consistency and offering fault tolerance and resiliency.

GoldenGate Cloud Service (GGCS) Architecture Diagram:


In a typical implementation of On-Premises to GGCS, the connectivity is accomplished through the use of SSH, since this is the only port opened by default on the cloud. The On-Premises server communicates directly to the GGCS server through the use of SOCKS proxy.

However, in cases where the security policy dictates or the client doesn’t want to use SSH, as an alternative a VPN connection between On-Premises and the OPC can be used. Currently, for GGCS it has been certified with Corente Services Gateway for VPN connectivity.

Corente VPN Service Architecture Diagram:


GGCS Corente VPN Deployment Architecture diagram depicted in this article:


GoldenGate Connectivity Flow:

  • On-Premises Network to OPC Network: GGCS Instance can be reached via GRE IP address
  • OPC Network to On-Premises Network: On-Premise OGG VM Server can be reached via IP address

The complete document can be found on the Oracle Support site under the document ID: 2198461.1


Be the first to comment

Comments ( 0 )
Please enter your name.Please provide a valid email address.Please enter a comment.CAPTCHA challenge response provided was incorrect. Please try again.Captcha