Oracle 云基础设施十大网络架构决策 [LRN1123].pdf

1、 Top 10 Network Architecture Decisions on OCINorth America Cloud Engineering,OCIOctober 15th,2025SpeakersPaul CainkarDirector Solutions Architecture,OracleJustin StonePrincipal Network Engineer,SkyhighIonut”Johnny”NeubauerMaster Principal Cloud Architect,OracleCopyright 2025,Oracle and/or its affili

2、ates|Confidential:Internal/Restricted/Highly Restricted2Oracle AI World 25 Agenda3Copyright 2025,Oracle and/or its affiliates|Confidential:Internal/Restricted/Highly RestrictedType of SubnetsPublic Subnets vs.Private SubnetsRouting in OCILocal Peering Gateway,Dynamic Routing GatewayCloud Connectivit

3、yFastConnect vs.IPsec VPN vs.InternetFastConnect SecurityMACsec vs.IPsec over FastConnectMulti-Cloud ConnectivityFastConnect vs.InternetOracle Database DBAzure,DGAWS,and DBGCPCloud Native SecurityNetwork Security Groups,Security Lists,and Zero Trust Packet RoutingNetwork FirewallOCI Network Firewall

4、 vs 3rdParty FirewallLoad BalancersNetwork vs.LBaaS vs.Global Accelerator DNSCloud Native vs.Hybrid DNSTypes of SubnetsPublic Subnets vs.Private SubnetsWhat are my options?Copyright 2025,Oracle and/or its affiliates|Confidential:Internal/Restricted/Highly Restricted5Private subnets allow communicati

5、on between systems in the same(or different)OCI Virtual Cloud Networks(VCN),to systems located on-premises over FastConnect or IPsec VPN,or to the Internet.Public subnets has similar properties to private subnets and optionally allows publicly routable IP addresses to be associated to resources in t

6、he public subnet which can be accessed from the Internet directly.Note:OCI recommends all subnets be configured as RegionalPoints to considerDoes the business have any public facing Internet applications?Is there a method for patching using internal services that doesnt require all instances to have