Book Image

Oracle Cloud Infrastructure for Solutions Architects

By : Prasenjit Sarkar
Book Image

Oracle Cloud Infrastructure for Solutions Architects

By: Prasenjit Sarkar

Overview of this book

Oracle Cloud Infrastructure (OCI) is a set of complementary cloud services that enables you to build and run a wide range of applications and services in a highly available hosted environment. This book is a fast-paced practical guide that will help you develop the capabilities to leverage OCI services and effectively manage your cloud infrastructure. Oracle Cloud Infrastructure for Solutions Architects begins by helping you get to grips with the fundamentals of Oracle Cloud Infrastructure, and moves on to cover the building blocks of the layers of Infrastructure as a Service (IaaS), such as Identity and Access Management (IAM), compute, storage, network, and database. As you advance, you’ll delve into the development aspects of OCI, where you’ll learn to build cloud-native applications and perform operations on OCI resources as well as use the CLI, API, and SDK. Finally, you’ll explore the capabilities of building an Oracle hybrid cloud infrastructure. By the end of this book, you’ll have learned how to leverage the OCI and gained a solid understanding of the persona of an architect as well as a developer’s perspective.
Table of Contents (15 chapters)
1
Section 1: Core Concepts of Oracle Cloud Infrastructure
Free Chapter
2
Chapter 1: Introduction to Oracle Cloud Infrastructure
7
Section 2: Understanding the Additional Layers of Oracle Cloud Infrastructure

Understanding instance operating system images

An instance image holds the operating system and other tools and software that go with it. Images can be Oracle-provided, Custom, or BYOI. You can choose an image from either Oracle Linux, Microsoft Windows, Ubuntu, or CentOS. As far as security concerns go within those images, Oracle adds rules within those images that restrict anyone else but the root on Linux instances (and administrators on Windows instances) from making outgoing connections to the iSCSI network endpoint (169.254.0.2:3260), which serves the instance's boot and block volumes.

For a maximum security posture, OCI's recommendation is not to tamper with any of the default operating system firewall rules as these may expose the risk of non-admins accessing the boot disk and other filesystems. This is also valid when you're creating a custom image from this.

Let's look at some of the characteristics of these images.

The following are characteristics...