Updated June 8, 2023, for General Availability and documentation.
Updated July 26, 2023, for Identity Domains.
Updated September 18, 2023, for v5 of the deployment file.
Updated January 17, 2024, for a new deployment blog.
Updated February 14, 2024.
Updated August 22, 2024 to reference an initial preparation blog.
Oracle Fusion Analytics (Fusion Analytics) is a family of prebuilt, cloud-native analytics services that run on OCI (Oracle Cloud Infrastructure). About Fusion Analytics is an overview.
Private Fusion Analytics enables private network access to Fusion Analytics via private service endpoints and disallows traffic from the internet. Direct access is allowed only from hosts within a customer’s tenancy.
This post is a member of the Private Fusion Analytics series. It builds upon the initial components described in Prepare for Oracle Analytics Services. It is a prequel to the Prepare Network Components for Internet Access to Oracle Fusion Analytics Service Endpoints, Prepare Network Components for Private Access to Oracle Fusion Analytics Service Endpoints and Deploy Network Components for Oracle Fusion Analytics Service Endpoints posts.
It describes the preparation required before provisioning an instance of Fusion Analytics with service endpoints and includes architectural diagrams, component descriptions, a deployment module, and links to other references.
This diagram depicts an OCI region in a customer’s cloud account (tenancy) that has a compartment, identity domain, and Oracle Fusion Cloud Applications provisioned.
Prepared State
This diagram depicts the OCI network components Fusion Analytics service endpoints require.
The prepared architecture has these components:
- Virtual Cloud Network
- Private Subnet
- Network Security Group
- Security List
The Virtual Cloud Network (VCN) and the private subnet must be provisioned with default DNS labels as shown in the illustration below.
Virtual Cloud Network
VCNs are virtual, private networks created in an OCI region and compartment. They resemble traditional networks, with firewall rules, route tables, and gateways. VCNs contain one or more CIDR block ranges of IP addresses.
Private Subnet
Subnets have a contiguous range of IP addresses that do not overlap with other subnets in the VCN. They are assigned a route table, security lists, and DHCP options.
Private subnets prohibit Internet ingress and egress.
Network Security Group
NSGs ( Network Security Group ) are virtual firewalls for autonomous databases and other specific services. They optionally consist of ingress and egress security rules that apply only to a specified set of resources in a single VCN. An NSG is required by the Fusion Analytics ADW (Autonomous Data Warehouse), but the NSG is not required to contain security rules.
Private Subnet Security List
Security Lists are virtual firewalls for most kinds of resources. They consist of ingress and egress security rules that apply to all resources in the subnets they are assigned to. Private Oracle Analytics services require an ingress rule allowing traffic from within the private subnet.
It is assumed deployers belong to OCI groups granted permissions via OCI policy rules to manage deployment components, including creating compartments and identity domains if necessary.
For a detailed list of prerequisites and an automated method to deploy this architecture via OCI Terraform , visit the Deploy Network Components for Oracle Fusion Analytics Service Endpoints blog post.
Other frameworks exist to deploy the components:
- OCI Console
- OCI APIs (Application Programming Interface)
- OCI CLI (Command Line Interface)
A typical provisioning sequence illustration follows:
- Create a VCN.
- Create a Security List.
- Create an NSG.
- Create a Private Subnet with the new security list attached.
You have prepared the environment and are ready to provision an instance of Private Fusion Analytics. For guidance on the next steps in your journey, return to Overview of Private Fusion Analytics.
Explore and learn about Fusion Analytics by visiting the community links, blogs, and library.
Implementing Oracle Fusion Analytics Series
Fusion Analytics Implementation Guide
CEAL Implementation Guidance Sessions, September 2023