Classless Inter-Domain Routing (CIDR):
Classless Inter-Domain Routing (CIDR) allows network routers to route data packets to the respective device based on the indicated subnet. Instead of classifying the IP address based on classes, routers retrieve the network and host address as specified by the CIDR suffix.
Range of IP Addresses (From IP) to (Last IP)
Reserved IPs:
N/W Address (192.168.0.0)
Subnet Default Gateway Address - (192.168.0.1)
Broadcast Address - (192.168.0.255)
select * from
(
select
seq.sequence_owner
, seq.sequence_name
, ( select application_name from
( select ord, application_id, application_name from
( select 1 ord, app.application_id, app.application_name
from apps.fnd_application_vl app
where app.product_code = substr(seq.sequence_name, 1, instr(seq.sequence_name,'_')-1)
union
select 2 ord, app.application_id, app.application_name
from apps.fnd_oracle_userid fou, apps.fnd_product_installations fpi, apps.fnd_application_vl app
where fou.oracle_username = seq.sequence_owner
and fpi.oracle_id = fou.oracle_id
and app.application_id = fpi.application_id
) order by ord, application_id
) where rownum = 1
) application_name
, seq.min_value
, seq.max_value
, seq.cache_size
, seq.last_number
, round(((seq.last_number-seq.min_value)/(seq.max_value-seq.min_value))*100) "% Range"
from dba_sequences seq
where seq.cycle_flag = 'N'
and seq.max_value > 0
)
where "% Range" >= 10 /* active threshold % */
and max_value < 2147483648 /* limited range */
and cache_size > 1000 /* large cache size */
order by cache_size desc;
Create Compartment:
Creating Identity Domain
Default Domain:
Groups
Users:
Who can create users
a. Tenancy Admin, b. Domain Admin, c. User Manager Admin Role d. Using Policies (allow group domain1/group1 to manage users in tenancy)
a. Create User using Console:
b. Create User using CSV import:
Dynamic Groups
Integrated Applications
Oracle Cloud Services
Jobs
Reports
Security -->
Settings
Notifications
Branding
Managing Group:
a. Collection of Users
b. Simplify Access Management
c. Audit & Compliance
Managing User
Resource manager views for monitoring performance at the PDB level.
--> V$RSRC_CONS_GROUP_HISTORY displays a history of consumer group statistics for each entry in V$RSRC_PLAN_HISTORY that has a non-NULL plan.
--> V$RSRC_CONSUMER_GROUP displays data related to currently active resource consumer groups.
--> V$RSRC_CONSUMER_GROUP_CPU_MTH displays all resource allocation methods defined for resource consumer groups.
--> V$RSRC_PDB displays data related to currently active resource consumer groups by pluggable database (PDB).
--> V$RSRC_PDB_HISTORY displays a history of consumer group statistics for each entry in V$RSRC_PDB that has a non-NULL plan by pluggable database (PDB).
--> V$RSRC_PLAN displays the names of all currently active resource plans.
--> V$RSRC_PLAN_CPU_MTH displays all available CPU resource allocation methods defined for resource plans.
--> V$RSRC_PLAN_HISTORY displays a history of when a resource plan was enabled, disabled, or modified on the instance. Up to 15 of the most recent entries are shown. Once the database is opened, this view shows at least one row. The row with the most recent START_TIME and with END_TIME equal to NULL gives information about the current resource plan.
--> V$RSRC_SESSION_INFO displays Resource Manager statistics per session.
--> V$RSRCPDBMETRIC displays information about resources consumed and wait times per PDB.
--> V$RSRCMGRMETRIC_HISTORY displays a history (the last one hour) of resource manager metrics, taken from V$RSRCMGRMETRIC. When a resource plan is set, this history is cleared and restarted. This view provides information about resources consumed and wait times per consumer group.
--> V$RSRCPDBMETRIC displays information about resources consumed and wait times per PDB.
--> V$RSRCPDBMETRIC_HISTORY displays a history (the last one hour) of resource manager metrics for a PDB, taken from V$RSRCPDBMETRIC. When a resource plan is set, this history is cleared and restarted. This view provides information about resources consumed and wait times per consumer group.
--> Flexible Peering Options:
Private Peering: Extends your on-premises network into your OCI Virtual Cloud Network (VCN) using private IP addresses.
Public Peering: Provides access to public OCI services (e.g., Object Storage, OCI Console) over a dedicated connection using public IP addresses.
FastConnect provides a dedicated private connection between OCI environment and data center or trusted third-party provider.
There are three physical connection types.
For resiliency and high availability, best practices recommend establishing multiple physical connections to the same OCI region.
Once a physical connection is established, there are two virtual circuit options. Public peering (D) enables you to access both private resources in a VCN as well as public resources without traversing the internet, similar in concept to using OCI as an ISP. Private peering (E) enables you to extend your on-premises private networks to OCI.
FastConnect supports the Border Gateway Protocol (BGP) to automate route updates between your environment, OCI, and (optionally) FastConnect partners or third-party providers.
Oracle Cloud Infrastructure Identity and Access Management (IAM):
Oracle Cloud Infrastructure Identity and Access Management (IAM) provides identity and access management features such as authentication, single sign-on (SSO), and identity lifecycle management for Oracle Cloud as well as Oracle and non-Oracle applications, whether SaaS, cloud-hosted, or on-premises.
I. OCI IAM: Authentication (AuthN)
Source: Oracle
a. User Credentials:
b. API Keys:
c. OAuth 2.0 Tokens
d. Instance Principals
e. Federated Identity
f. Multi Factor Authentication (MFA)
II. OCI IAM: Authorization (AuthZ):
a. Policies
b. Groups
c. Dynamic Groups
Technical Architecture 1. Local VCN Peering (LPGs): Uses Local Peering Gateways to connect two VCNs within the same region - Think of...
