Thursday, October 30, 2025

OCI: Zero-Trust Packet Routing - Draft

 What is ZPR?

===> ZPR is a network-security control in OCI that introduces an intent-based security policy layer for packet routing (i.e., network traffic) based on resource attributes (“security attributes”) rather than just network topology, IPs, subnets, etc. 

Ref: https://docs.oracle.com/en-us/iaas/Content/zero-trust-packet-routing/

==>It is intended to decouple network architecture from network security. In other words, network changes (adding subnets, VCNs, routing fabric) should not inadvertently weaken the security posture because ZPR policies still govern “who can talk to whom” regardless of architecture. 

Ref: https://www.prnewswire.com/news-releases/oracle-strengthens-organizations-cloud-security-posture-by-separating-network-security-from-network-architecture-302243043.html 


==>The service was announced (in preview or GA) for OCI as of October 2024. 

Ref: https://docs.oracle.com/en-us/iaas/releasenotes/zero-trust-packet-routing/introducing-zpr.htm 

No comments:

Post a Comment

Beyond the Create Button: Architecting Oracle Autonomous Database on Microsoft Azure into a Live Data Pipeline

1. Create blade: pick Transaction Processing:   Why OLTP: the app writes small, concurrent rows (customer profiles, orders, sessions). Trans...