We are pleased to announce that Oracle Visual Builder now supports private endpoints, offering enhanced security for your instance. With this new capability, you can configure the following secure architecture for your Visual Builder environment: 

  • Utilize a Visual Builder instance with a database within a Virtual Cloud Network (VCN) without exposing a public IP address. 
  • Enable the Visual Builder instance to access REST services within your VCN that do not have public IP addresses. 
  • Restrict access to Visual Builder apps from only on-premises networks. 
    • –>

To implement this configuration, provision a Visual Builder instance within your VCN. To allow public access to apps on this instance, use a Load Balancer to direct network traffic to your private VCN instance. 

Here is a high-level architectural diagram illustrating this solution: 

VB in a Private Subnet Architecture

Visual Builder Apps for Private Data 

Organizations often seek to limit the exposure of internal data and APIs, avoiding public internet accessibility. With this new architecture, a Visual Builder instance can access REST services without a public IP address, restricting traffic to internal networks. As all traffic to REST data sources is directed through the VB REST Proxy, the client's browser lacks a direct route to access the REST backend, providing an additional security layer. 

Visual Builder Apps on Private Databases 

Similarly, companies typically prefer to avoid exposing their databases for external SQL access. By having a Visual Builder instance within a private network, you can create VB Business Objects mapped to database objects in a database without public interfaces. 

Get Started

Instructions for provisioning a Visual Builder in a private subnet are now in the Visual Builder admin guide.

Note – this is currently supported for standalone Visual Builder instances. Support for relocating VB instances that are part of Oracle Integration into a private subnet is planned for a future release.

While Visual Builder apps are typically designed for browser accessibility, some organizations require additional access restrictions. With Visual Builder on a private endpoint, you can specify that only machines within a specific network perimeter can access the instance while preventing external access." 

–>