Thursday, October 30, 2025

OCI: Zero-Trust Packet Routing - Draft

 What is ZPR?

===> ZPR is a network-security control in OCI that introduces an intent-based security policy layer for packet routing (i.e., network traffic) based on resource attributes (“security attributes”) rather than just network topology, IPs, subnets, etc. 

Ref: https://docs.oracle.com/en-us/iaas/Content/zero-trust-packet-routing/

==>It is intended to decouple network architecture from network security. In other words, network changes (adding subnets, VCNs, routing fabric) should not inadvertently weaken the security posture because ZPR policies still govern “who can talk to whom” regardless of architecture. 

Ref: https://www.prnewswire.com/news-releases/oracle-strengthens-organizations-cloud-security-posture-by-separating-network-security-from-network-architecture-302243043.html 


==>The service was announced (in preview or GA) for OCI as of October 2024. 

Ref: https://docs.oracle.com/en-us/iaas/releasenotes/zero-trust-packet-routing/introducing-zpr.htm 

No comments:

Post a Comment

An OCI Architect's First Walk Through Generative AI

Every enterprise architect eventually gets that request from leadership: "Can we use AI on our data — without shipping it off to some ...