Published Version 6 on March 11, 2024.
Oracle Fusion Analytics (Fusion Analytics) is a family of prebuilt, cloud-native analytics services that run on OCI (Oracle Cloud Infrastructure). About Fusion Analytics is an overview.
Private Fusion Analytics enables private network access to Fusion Analytics via private service endpoints and disallows traffic from the internet. Direct access is allowed only from private hosts in OCI or connected to OCI via a DRG (Dynamic Routing Gateway).
Internet access is possible using public proxies that connect privately to the service endpoints.
This post is a member of the Private Fusion Analytics series. It builds upon the network foundation described in Prepare for Oracle Fusion Analytics Service Endpoints. It guides the initial networking component setup for internet access to Fusion Analytics service endpoints. Included are architectural diagrams, component descriptions, and links for additional references.
This section contains initial and prepared architecture diagrams.
The initial state contains a provisioned Fusion Analytics instance with three service endpoints.
Refer to Prepare Oracle Fusion Analytics with Service Endpoints and Provision Oracle Fusion Analytics with Service Endpoints for details on a Fusion Analytics instance’s provisioned state.
This diagram depicts Fusion Analytics service endpoints provisioned in a VCN (Virtual Cloud Network).
Prepared State
This diagram depicts the additional and updated components required for Internet access to Fusion Analytics service endpoints.
Descriptions of the components depicted in the initial-state architecture diagram are provided in the Prepare for Oracle Fusion Analytics Service Endpoints post.
This section describes the additional and updated components in the prepared-state architecture diagram.
An Internet Gateway is added to the VCN to facilitate traffic from and to the Internet.
Public Route Table
A Route Table is added to the VCN and assigned to the public subnet to send Fusion Analytics response traffic through the Internet Gateway.
Public Subnet Security List
A security list is added to the VCN and assigned to the public subnet to allow egress from the subnet and ingress from customer-defined CIDR blocks encompassing user IP addresses.
Public Subnet
A public subnet is added to the VCN to host the Network Load Balancers acting as public proxies and is assigned the public subnet security list and route table .
Network Load Balancers
NLBs (Network Load Balancers) are added as public proxies to the public subnet to receive TCP traffic from the internet and forward it to the relevant Fusion Analytics service endpoints.
Note: Network Load Balancers support only one destination for each port configured. Because Fusion Analytics has two services using port 443, two NLBs are required. The ADW service using port 1522 is assigned to one of the two NLBs.
Network Security Group
The ADW NSG, if used, is updated to allow ingress traffic from the NLB acting as a proxy for the ADW.
Private Subnet Security List
A security list is added to the VCN and assigned to the private subnet to allow ingress traffic from the NLBs.
It is assumed deployers belong to OCI groups granted permissions via OCI policy rules to manage deployment components, including creating compartments if necessary.
Visit the Deploy Network Components for Oracle Fusion Analytics Service Endpoints Internet Access blog post for an automated method of deploying this architecture via OCI Terraform.
Other frameworks exist to deploy the components:
- OCI Console
- OCI Command Line Interface (CLI)
- OCI APIs (Application Programming Interface)
A typical provisioning sequence follows: Components Created
- Internet Gateway
- Public Subnet Security List
- Public Subnet Route Table
- Public Subnet
- Network Load Balancers
- Private Subnet Security List
- Private Subnet
- Network Security Group (if used)
Refer to the Overview of Private Fusion Analytics for references to other posts in the series.
Explore and learn about Fusion Analytics by visiting the community links, blogs, and library.
Implementing Oracle Fusion Analytics Series
Fusion Analytics Implementation Guide