Skip to main content

Demystifying OCI’s Virtual Cloud Network: A Deep Dive into VCN Architecture (Part 1)

AA Virtual Cloud Network (VCN) is the fundamental building block for networking in Oracle Cloud Infrastructure (OCI). It can be thought of as a virtual version of a traditional network that you’d operate in your own data center. 

Virtual Cloud Network


The benefits of using a VCN include:

  • Isolation– VCNs provide complete isolation from other virtual networks in the cloud. This allows you to have full control over your network environment.
  • Security– VCNs give you control over security through security lists and network security groups. You can restrict access within subnets as well as between subnets.
  • Customization– VCNs allow you to fully customize the network environment. You can define subnets, route tables, gateways, and other components to meet your specific needs.
[ Good Read: Serverless Architecture ]

The key components that make up a VCN include:

  • Subnets– A subnet is a subdivision of a VCN that allows you to group related resources together. Subnets can be either public or private.
  • Route tables– Route tables control the flow of traffic out of a subnet. They specify the destinations that traffic can be routed to.
  • Security lists– Security lists act as virtual firewalls that control ingress and egress traffic at the subnet level.
  • Gateways– Gateways connect your VCN to external networks or other VCNs. Common gateways are internet gateways, NAT gateways, service gateways, and peering gateways.
  • Network security groups– NSGs provide subnet-level and instance-level security through stateful firewall rules. 

By leveraging VCNs and their components, you can create a secure, robust, and customizable network environment tailored to your application and use case requirements.

Oracle VCN Architecture

Creating a Virtual Cloud Network

Log in to your Oracle Cloud account and Choose Networking > VirtualCloud Networks

Choose Networking > VirtualCloud Networks

Click on Start VCN Wizard

Click on Start VCN Wizard

Click VCN with Internet Connectivity then Click Start VCN Wizard

Click VCN with Internet Connectivity then Click Start VCN Wizard

Fill in the details as shown in the below images

VCN Name:                        OCI_HOL_VCN      # Example
Compartment: Demo # Example
VCN CIDR Block: 10.0.0.0/16 # Example
Public Subnet CIDR Block: 10.0.2.0/24 # Example
Private Subnet CIDR Block: 10.0.1.0/24 # Example
Use DNS Hostnames in this VCN: Checked

Then Click Next

Review the details you have filled then click on Create if the details are correct

It will create a VCN with the provided details

Now VCN is created and you can view it by clicking on View Virtual Cloud Network

Congratulations you have created VCN with 1 Public and 1 Private Subnet.

Public Subnets

Public subnets provide resources with access to and from the public internet via an internet gateway. Resources such as web servers, application servers, and load balancers that need to be accessible from the internet should be deployed in public subnets. 

You Can Check More Info About: Virtual Cloud Network.

Comments

Popular posts from this blog

How to Turn CloudWatch Logs into Real-Time Alerts Using Metric Filters

Why Alarms Matter in Cloud Infrastructure   In any modern cloud-based architecture , monitoring and alerting play a critical role in maintaining reliability, performance, and security.   It's not enough to just have logs—you need a way to act on those logs when something goes wrong. That's where CloudWatch alarms come in.   Imagine a situation where your application starts throwing 5xx errors, and you don't know until a customer reports it. By the time you act, you've already lost trust.   Alarms prevent this reactive chaos by enabling proactive monitoring—you get notified the moment an issue surfaces, allowing you to respond before users even notice.   Without proper alarms:   You might miss spikes in 4xx/5xx errors.   You're always proactive instead of reactive .   Your team lacks visibility into critical system behavior.   Diagnosing issues becomes more difficult due to a lack of early signals.   Due to all the reasons Above, th...

How to Monitor Redis Using OpenTelemetry: A Beginner’s Guide

Redis is a fundamental component in many modern applications, prized for its speed and versatility. However, it’s important to remember that Redis systems require ongoing attention; they are not just set-and-forget solutions. To ensure optimal performance, it’s essential to monitor key metrics that can signal early warnings of performance issues, resource shortages, or system failures. In this blog post, we’ll explore how to monitor Redis using the OpenTelemetry Collector’s Redis receiver, eliminating the need for a separate Redis Exporter. [ Are you looking : G enerative AI Integration Services ] Why is Monitoring Redis Important? Redis can encounter several challenges, such as: Excessive memory consumption Slow response times for clients Key evictions triggered by memory constraints High CPU usage Replication delays Why Not Redis Exporter? (The Bottleneck)   Issue with Redis Exporter   Explanation   Extra Container Dependency   Required a separate exporter contain...

How to Perform Penetration Testing on IoT Devices: Tools & Techniques for Business Security

The Internet of Things (IoT) has transformed our homes and workplaces but at what cost?   With billions of connected devices, hackers have more entry points than ever. IoT penetration testing is your best defense, uncovering vulnerabilities before cybercriminals do. But where do you start? Discover the top tools, techniques, and expert strategies to safeguard your IoT ecosystem. Don’t wait for a breach, stay one step ahead.   Read on to fortify your devices now!  Why IoT Penetration Testing is Critical  IoT devices often lack robust security by design. Many run on outdated firmware, use default credentials, or have unsecured communication channels. A single vulnerable device can expose an entire network.  Real-world examples of IoT vulnerabilities:   Mirai Botnet (2016) : Exploited default credentials in IP cameras and DVRs, launching massive DDoS attacks. Stuxnet (2010): Targeted industrial IoT systems, causing physical damage to nuclear centrifu...