Network Port and Protocol Matrix

Compute Cloud@Customer requires access permissions to be granted for certain IP addresses, ports, and protocols.

The default security posture for almost all firewalls is to deny access. This applies to the firewalls used between the Compute Cloud@Customer rack and the customer data center.

To allow certain Compute Cloud@Customer features to operate correctly, access must be granted for certain IP address and related services. An "allow all" rule such as 0.0.0.0/0 is too broad for security purposes, so the best practice is to explicitly list addresses, ports, and protocols to allow.

Compute Cloud@Customer is installed with connections to different networks for different purposes (see Customer Site Network Requirements). For security purposes, Compute Cloud@Customer isolates the administration network from the customer data network.

During the Compute Cloud@Customer installation, Oracle configures the isolated networks, and works with your network administrator to configure the network ports so they work within your environment.

The following table lists the access permissions for certain IP addresses, ports, and protocols that are granted for data center and admin network isolation.

Table key:

• Customer – Customer administrator access for Compute Cloud@Customer resource management
• Oracle – Oracle administrator access, which is only accessible by Oracle when granted access by the customer using Oracle Operator Access Control.