Deploy DNS Components for Oracle Fusion Analytics Service Endpoints Internet Access

Initial State

This diagram depicts the base network components deployed for Internet access to Fusion Analytics service endpoints.

---

Local DNS

This diagram depicts the local DNS components deployed for Internet access to Fusion Analytics service endpoints.

---

Customer DNS

This diagram depicts the customer DNS components deployed for Internet access to Fusion Analytics service endpoints.

---

OCI Private DNS

This diagram depicts the OCI private DNS components deployed for Internet access to Fusion Analytics service endpoints.

Client (Local) DNS

A file on a client computer, typically named /etc/hosts, acts as a DNS private zone for that client.

Use the hosts file provided by the Deploy Network Components for Oracle Fusion Analytics Service Endpoints Internet Access blog post.

As an administrator on your workstation, append the contents of the hosts file to:

• /etc/hosts on Linux and Mac
• C:\Windows\System32\drivers\etc\hosts on Windows

---

Customer DNS Private Zone

Many commercial DNS systems are available, and each implements zones differently.

The hosts file provided by the Deploy Network Components for Oracle Fusion Analytics Service Endpoints Internet Access blog post contains the necessary information for the zone.

Create a private zone in the customer DNS containing the FQDNs and respective NLB public IP addresses.
Ensure the client workstations are configured to use the Customer DNS.

Below is an example of an OCI private zone for Fusion Analytics with service endpoints. A zone in a customer DNS can look different.

---

OCI (Oracle Cloud Infrastructure) Private DNS

An OCI cloud shell simplifies OCI authentication and provides a standardized method for various workstations.

Follow these steps to deploy the example components:

1. Download the compressed package from here.
2. Unzip the ZIP archive package.
3. Determine or obtain the public IP address of the customer DNS forwarder. This address is granted access to the OCI DNS listener.

   Note: This address may be the address of a gateway in the customer network sending traffic to the OCI DNS listener.

4. Update the iadns_variables_upload.tf file in the unzipped archive package.

   • Open the file from the unzipped folder and follow the instructions.

     • Replace “null” with the public IP address enclosed in quotes.
     • Save and close the file.
        
5. Sign in to the OCI cloud account.
6. Change to the OCI region designated for Fusion Analytics.
7. Click on Developer Tools and select Cloud Shell.

   

8. Click on the

   

   Gear Icon and select Upload.
   • Drop or Select the IA-DNS-v1.zip archive package.
   • Click Upload.
      
9. Click again on the

   

   Gear Icon and select Upload
   • Drop or Select the ia-dns_variables_upload.tf file.
   • Click Upload
      
10. Decompress the uploaded package in Cloud Shell.
    • Copy and paste this code snippet into the Cloud Shell command line.

cd; [ -d $HOME/IA-DNS ] && rm -r $HOME/IA-DNS; unzip $HOME/IA-DNS.zip; 

11. Deploy the components.
    • Copy and paste this code snippet into the Cloud Shell command line.

cd; bash ~/'IA-DNS/resources/setup' > >(tee -a iadns_setup.log) 2> >(tee -a iadns_setup.log >&2)

12. Optionally, view the setup log file.
    • Copy and paste this code snippet into the Cloud Shell command line.

cd; more 'iadns_setup.log'

13. Copy the note on the screen to a text file to access Fusion Analytics and configure the customer DNS forwarder.

    

14. Close and exit Cloud Shell, and view the components using the OCI console.
    • Navigate to Networking > Virtual Cloud Networks.
       
    • Choose the example Compartment.
      • Click the example DNS_VCN.
        • View the private subnet and private security list.
        • View the Internet gateway.
        • View the public subnet, security list, and route table.
        • View the DNS Resolver.
          • View the DNS_Custom_View.
            • View the oraclecloud.com private zone.
               
    • Navigate to Networking > Network Load Balancers.
      • View the example DNS_NLB.
        • View the Listener.
        • View the Backend Set.
        • View the Backend.

15. Configure the customer DNS to forward Fusion Analytics FQDN DNS queries to the OCI private DNS listener in the DNS VCN. Use the nameserver IP address and the Fusion Analytics domain names noted above.

16. Ensure clients workstations are configured to use the Customer DNS.

---

Redeployment for a Public IP change

The public IP address may change for various reasons. An IP address (IPv4) has four numerical parts separated by periods, e.g., <part1.part2.part3.part4>, <121.200.33.65>.

If one or both of the first two parts change, redeploy the public IP address.

;Follow these steps to redeploy the Public IP address.

1. Update the ia-dns_variables_upload.tf file in the unzipped archive package.

   • Open the file from the unzipped folder and follow the instructions.
     • Replace the Public IP Address enclosed in quotes.
   • Save and close the file.
      
2. Sign in to the OCI cloud account.
3. Change to the OCI region designated for Fusion Analytics.
4. Click on Developer Tools and select Cloud Shell.

   

5. Click on the

   

   Gear Icon and select Upload.
   • Drop or Select the iadns_variables_upload.tf file.
   • Click Upload
      
6. Redeploy the public IP address.
   • Copy and paste this code snippet into the Cloud Shell command line.

cd; bash ~/'IA-DNS/resources/setup' > >(tee -a iadns_setup.log) 2> >(tee -a iadns_setup.log >&2)

7. Optionally, view the setup log file.
   • Copy and paste this code snippet into the Cloud Shell command line.

cd; more 'iadns_setup.log'

8. Close and exit Cloud Shell, and view the components using the OCI console.
   • Navigate to Networking > Virtual Cloud Networks.
   • Choose the example Compartment.
   • Click the example DNS_VCN.
     • View the public subnet and security list.
       • View the new Public IP CIDR in the security list.

Internet Access Using a Local DNS File

This diagram depicts Internet access to Fusion Analytics service endpoints using a local DNS file.
Step 1 resolves a Fusion Analytics hostname, and step 2 uses the result to access Fusion Analytics vi an NLB.

---

Internet Access Using a Customer DNS Private Zone

This diagram depicts Internet access to Fusion Analytics service endpoints using a customer DNS private zone.
Step 1 resolves a Fusion Analytics hostname, and step 2 uses the result to access Fusion Analytics vi an NLB.

---

Internet Access Using OCI Private DNS

This diagram depicts Internet access to Fusion Analytics service endpoints using OCI private DNS.
Step 1 resolves a Fusion Analytics hostname, and step 2 uses the result to access Fusion Analytics vi an NLB.