{"id":16544,"date":"2025-03-11T09:58:59","date_gmt":"2025-03-11T08:58:59","guid":{"rendered":"https:\/\/roglacup.com\/klaus62\/?p=16544"},"modified":"2025-03-12T14:48:46","modified_gmt":"2025-03-12T13:48:46","slug":"oci-architect-2025","status":"publish","type":"post","link":"https:\/\/roglacup.com\/klaus62\/2025\/03\/11\/oci-architect-2025\/","title":{"rendered":"OCI Architect 2025"},"content":{"rendered":"\n

1 Dan<\/strong><\/p>\n\n\n\n

A<\/strong>.OCI IAM<\/strong><\/p>\n\n\n\n

IAM – Identity and Access Management service\u0111<\/p>\n\n\n\n

AuthN<\/p>\n\n\n\n

Authz<\/p>\n\n\n\n

Oracle Cloud ID<\/strong> – Oracle-assigned identifier<\/p>\n\n\n\n

Identity domains<\/strong><\/p>\n\n\n\n

Logi\u010dna razporeditev uporabnikov<\/p>\n\n\n\n

Tipi domen : Free, Oracle Apps premium, Premium<\/p>\n\n\n\n

Principals<\/strong><\/p>\n\n\n\n

Interakcija z resursi ( uporabniki…)<\/p>\n\n\n\n

Authentikacija<\/strong><\/p>\n\n\n\n

Username, password, API Signing key – prijava z putty-em, Auth tokens<\/p>\n\n\n\n

Authorizacija, Authz<\/strong><\/p>\n\n\n\n

Preko politik ( liste pravil).<\/p>\n\n\n\n

Compartment<\/strong><\/p>\n\n\n\n

Zbir resursov( VCN, instance…), ki so dosegljive grupam. Uporabniki + politike -> dostop do kontejnerja ( “comparmenta”.<\/p>\n\n\n\n

Dynamic Groups<\/strong> – se uporablja za resurse ( stre\u017enike …..)<\/p>\n\n\n\n

<\/p>\n\n\n\n

B.VIRTUAL Cloud Network<\/strong><\/p>\n\n\n\n

Service Gwateway – Oracle storitve<\/p>\n\n\n\n

IP Address – 10.0.0.0\/16 – najmanj\u0161a v Oracle cloudu … najve\u010dja 30 ; RFC 1918 prefix<\/p>\n\n\n\n

VCN razdelimo na subnete<\/p>\n\n\n\n

IP Address – Primary VNIC <\/p>\n\n\n\n

VCN Gateways<\/strong><\/p>\n\n\n\n

Internet Gateways – povezava na Internet; public subnet – dovoljene so javni naslovi<\/p>\n\n\n\n

Route table<\/strong> <\/p>\n\n\n\n

NAT Gateway<\/strong> – dostop private recimo stre\u017enikov do interneta ( patchi)…<\/p>\n\n\n\n

Service Gateway <\/strong>– Oracle storitve – object storage ….<\/p>\n\n\n\n

VCN Peering <\/strong>– komunikacija med dvema VCNjema znotraj regije ; uporaba DRGja med razli\u010dnimi regijami <\/p>\n\n\n\n

Security list <\/strong>– ingress v subnet , egress – iz subneta ; Stateful – ohranja informacijo o konekciji; stateless – ne ohranja informaciji o konekciji. Se vedno ve\u017eejo na subnet.<\/p>\n\n\n\n

Network Security Group<\/strong> – zbir resursov in potem definiramo pravilo za to grupo<\/p>\n\n\n\n

<\/p>\n\n\n\n

Cloud Connectivity Options<\/strong><\/p>\n\n\n\n

Fastconect, Site-to-Site VPN, Public Internet<\/p>\n\n\n\n

Dynamic Routing Gateway se uporablja za<\/strong> :VCN, Remote Peering , Site-to-Site VPN, FastConnect<\/p>\n\n\n\n

Site-to-Site VPN: naredi dva tunela<\/p>\n\n\n\n

FastConnect: 1 do 10Gbps povezava<\/p>\n\n\n\n

Load Balancer<\/strong><\/p>\n\n\n\n

Load Balancer Service <\/strong>– proxy – layer 7 in SSL terminacija, je lahko public ali private, podpora protocolom. Policies: Round robin,IP hash , Least Connection<\/p>\n\n\n\n

Network Load Balancer<\/strong> – enterprise – connection gre skozi – dela na layerju 3 in 4; za latency-sensitive workloads. Poilcy 2,3,5 Tuple Hash.<\/p>\n\n\n\n

Backend Server, Backend Set, Load Balancing Policy<\/p>\n\n\n\n

DNS<\/strong> koncepti podobni kot pri klasi\u010dnem DNSju.<\/p>\n\n\n\n

Traffic Management Steering Policies – Geolocation Steering – pogleda odkod pride\u0161 in vrne na lokalne ip-je. ( recimo vrne v Nem\u010dijo).<\/p>\n\n\n\n

ASN Steering ?<\/p>\n\n\n\n

<\/p>\n\n\n\n

Network Command center <\/strong>– podporna orodja Network Visualizer; VTAP example<\/p>\n\n\n\n

<\/p>\n\n\n\n

2 Dan<\/strong><\/p>\n\n\n\n

OCI COMPUTE Service<\/strong><\/p>\n\n\n\n

Bare Metal<\/p>\n\n\n\n

Virtual Machine instances<\/p>\n\n\n\n

Images: Linux,Windows, Custom images ali izbere\u0161 na Marketplacu ( omejitev je 400GB). Image export\/import je mo\u017een omogo\u010den.<\/p>\n\n\n\n

Shapes\/Oblika stre\u017enika – Bare Metal so fiksne. Imamo AMD, Intel, Ampere.<\/p>\n\n\n\n

GPU stre\u017eniki – samo bare metal.<\/p>\n\n\n\n

Oracle cloud agent<\/strong><\/p>\n\n\n\n

Bastion – allows SSH connections to an instance without public IP address<\/p>\n\n\n\n

OSMS Agent<\/p>\n\n\n\n

Run command<\/strong><\/p>\n\n\n\n

Windows scripts run as batch file<\/p>\n\n\n\n

Linux scripts run in a bash shell <\/p>\n\n\n\n

Results can output to object storage.<\/p>\n\n\n\n

Instance Console Types <\/strong><\/p>\n\n\n\n

<\/p>\n\n\n\n

Relocating a VM instance<\/strong> – reboot migration – rebotat je treba skozi console; live migration ; manual migration – sami migriramo – shranimo boot volume<\/p>\n\n\n\n

VM recovery<\/strong> – podobno kot pri live migration<\/p>\n\n\n\n

Shielded instances <\/strong>– boot level preverjanje<\/p>\n\n\n\n

<\/p>\n\n\n\n

Confidental computing – kriptirarni podatki – suportirano na AMD procesorjih<\/p>\n\n\n\n

Storage Services<\/strong> local NVME, Block, File Storage, Object Storage, Archive Storage<\/p>\n\n\n\n

OCI Object Storage<\/strong> – suppoprt private access from OCI resources in a VCN<\/p>\n\n\n\n

Pojmi: bucket – logi\u010dni kontejner za storage objekte ; unique za tenant<\/p>\n\n\n\n

Endpoint:<\/strong> Namespace, bucket,objekt primer -: https:\/\/objectstorgae.us-sanjose-1.oraclecloud.com.\/n…\/b…\/o…<\/p>\n\n\n\n

Buckete vidimo skozi konzolo … ali preko apijev.<\/p>\n\n\n\n

Bucketi so lahko private ali public.<\/p>\n\n\n\n

Multipart Uploads je omogo\u010den. Razbije objekte in dela kot paralelen session….<\/p>\n\n\n\n

Tiers-, Standard, Archive, Infrequent access ( min. retention period 31 days), archive storage(min. reten. period 90 dni). Mo\u017eno je narediti autotiering. Prav tako obstajajo Lifecycle Policy Rules……<\/p>\n\n\n\n

Pre-Authenticated Request<\/strong> – dostop, da se ne prijavlja\u0161 v cloud<\/p>\n\n\n\n

Backup and Restoration<\/strong><\/p>\n\n\n\n

Bronze, Silver, Gold – automated policy-based capability ; retention je v video<\/p>\n\n\n\n

.File Storage<\/strong><\/p>\n\n\n\n

NFS<\/p>\n","protected":false},"excerpt":{"rendered":"

1 Dan A.OCI IAM IAM – Identity and Access Management service\u0111 AuthN Authz Oracle Cloud ID – Oracle-assigned identifier Identity domains Logi\u010dna razporeditev uporabnikov Tipi domen : Free, Oracle Apps premium, Premium Principals Interakcija z resursi ( uporabniki…) Authentikacija Username, password, API Signing key – prijava z putty-em, Auth tokens Authorizacija, Authz Preko politik (… Read More »OCI Architect 2025<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":16552,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"neve_meta_sidebar":"","neve_meta_container":"","neve_meta_enable_content_width":"","neve_meta_content_width":0,"neve_meta_title_alignment":"","neve_meta_author_avatar":"","neve_post_elements_order":"","neve_meta_disable_header":"","neve_meta_disable_footer":"","neve_meta_disable_title":"","footnotes":""},"categories":[384,981,1047],"tags":[],"class_list":["post-16544","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-computer-science","category-oci","category-oracle-it-vendors"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/roglacup.com\/klaus62\/wp-json\/wp\/v2\/posts\/16544","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/roglacup.com\/klaus62\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/roglacup.com\/klaus62\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/roglacup.com\/klaus62\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/roglacup.com\/klaus62\/wp-json\/wp\/v2\/comments?post=16544"}],"version-history":[{"count":11,"href":"https:\/\/roglacup.com\/klaus62\/wp-json\/wp\/v2\/posts\/16544\/revisions"}],"predecessor-version":[{"id":16570,"href":"https:\/\/roglacup.com\/klaus62\/wp-json\/wp\/v2\/posts\/16544\/revisions\/16570"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/roglacup.com\/klaus62\/wp-json\/wp\/v2\/media\/16552"}],"wp:attachment":[{"href":"https:\/\/roglacup.com\/klaus62\/wp-json\/wp\/v2\/media?parent=16544"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/roglacup.com\/klaus62\/wp-json\/wp\/v2\/categories?post=16544"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/roglacup.com\/klaus62\/wp-json\/wp\/v2\/tags?post=16544"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}