Networking
102 Release Notes
Redundancy improvements for FastConnect
Oracle Cloud Infrastructure FastConnect now makes it easier to configure redundancy. Several types of redundancy are supported:
...New Oracle Interconnnect for Google Cloud
With the new Oracle Interconnect for Google Cloud, you can connect your Google Cloud resident applications or services with Oracle ...
Introducing IP Address Insights
Gain a comprehensive understanding of IP addresses utilized within your tenancy and easily discover all resources spanning multiple compartments. Using IP Address Insights, get insights into IP address utilization to optimize network resource allocation and identify underused resources.
For more information, see IP Address Insights.
OCI Cache support for Network Security Groups (NSGs)
You can now control network access to OCI Cache clusters using security rules defined for one or more network security ...
Network Path Analyzer available in US Government Cloud with FedRAMP Authorization
Network Path Analyzer (NPA) is now available in US Government Cloud with FedRAMP Authorization.
For more information about US ...
New Release of VCN Flow Logs
You can now use capture filters to generate flow logs only for traffic you specify:
- Enable flow logs ...
IPv6 addressing at Compute instance launch
You may now assign IPv6 addresses to VNICs attached to your Compute instance during launch. Assigned IP addresses will be ...
MACSEC on FastConnect now allows Fail Open mode
MACSEC for FastConnect now allows Fail Open mode. This would allow unencrypted traffic to flow on the FastConnect virtual circuit ...
IPSec over FastConnect is now available
You can now provision Site-to-Site VPN over your FastConnect virtual circuits rather than over the public internet. See FastConnect Security ...
Larger regional topology generation in Network Visualizer
To enable the generation of larger regional topology maps, limits are now enforced on the number of elements displayed. Formerly, ...
Oracle Digital Assistant available
Oracle Digital Assistant is now available via a private endpoint in your VCN in addition to existing access methods. For ...
New features for Megaport customers
If your FastConnect Partner is Megaport, you can now use the OCI Console to set up FastConnect and then create ...
Access to Microsoft Azure expanded to South Africa Central (Johannesburg) region and Azure South Africa North location
Oracle Cloud Infrastructure and Microsoft Azure cross-cloud connection expanded to Oracle Cloud Infrastructure South Africa Central (Johannesburg) region and Azure ...
VCN route table increase for route rules
The default limit for route rules in VCN routing tables has been increased to 200 and made a soft limit. ...
OCI now supports intra-VCN routing
OCI now supports intra-VCN routing, which creates local routes for each VCN CIDR in all VCN route tables, new ...
OCI now supports using multiple IPv6 prefixes
OCI now supports the use of multiple IPv6 prefixes within a VCN and subnet, and IPv6 addresses from different prefixes ...
New features added to Network Visualizer
Network Visualizer now allows you to export topology maps and a PDF with relevant resource information. You can also now ...
OCI introduces Network Path Analyzer for your virtual network configuration troubleshooting
Network Path Analyzer (NPA) provides a unified and intuitive capability you can use to identify virtual network configuration issues that ...
FastConnect Partner Provisioning
The FastConnect partner-side provisioning process for virtual circuits with the Megaport and Colt partners is now more streamlined. You can ...
Oracle now has a VTAP service in your VCNs
Today, Oracle launches the Virtual Testing Access Point (VTAP) service in OCI. VTAP functionality, sometimes referred to as full packet ...
BYOIP Now Includes IPv6
Oracle can now support multiple IPv6 prefixes for use within a VCN.
When you enable IPv6 on a VCN, ...
New FastConnect Options
Users of Oracle FastConnect now have an easy way to tear down and re-establish a BGP peering session over their ...
DRG route distribution match criteria
The required matchCriteria
field in a DRG route distribution statement now has a MATCH_ALL matchType that Terraform can use instead ...
DRG route advertisement and filtering enhancements
You can now choose to import VCN CIDRs or subnet CIDRs from a VCN attachment. For details, see the Overview ...
FastConnect Physical and Logical Devices
Oracle Cloud Infrastructure FastConnect now displays the names of the physical and logical devices in FastConnect locations that are used ...
Access to Microsoft Azure expanded to Singapore (Singapore) region and Azure Singapore location
Oracle Cloud Infrastructure and Microsoft Azure cross-cloud connection expanded to Oracle Cloud Infrastructure Singapore (Singapore) region and Azure Singapore location, ...
Access to Microsoft Azure expanded to South Korea Central (Seoul) region and Azure Seoul location
Oracle Cloud Infrastructure and Microsoft Azure cross-cloud connection expanded to Oracle Cloud Infrastructure South Korea Central (Seoul) region and Azure ...
Access to Microsoft Azure expanded to US West (Phoenix) region and Azure Phoenix location
Oracle Cloud Infrastructure and Microsoft Azure cross-cloud connection expanded to Oracle Cloud Infrastructure US West (Phoenix) region and Azure Phoenix ...
Network Load Balancer supports IPv6
Network Load Balancers can now support dual-stack IPv6 addresses. This enables you to support both IPv4 and IPv6 clients on ...
IPSec Tunnel Customizations
IPSec tunnels in Site-to-Site VPN can now be customized in the following ways:
- Custom phase 1 and phase ...
Encryption on Fastconnect
FastConnect using colocation or a third-party provider can now be configured to support MACsec encryption. For more details, refer to ...
Network Visualizer 2.0
This update of the Network Visualizer service extends the granularity of the visualization to see within subnets, and adds the ...
Network Visualizer updates
This update of the Network Visualizer service introduces the visualization for DRGv2 capabilities in the regional view covering the following ...
Resource availability checks are now part of VCN and VPN wizards
When using either the VCN or VPN wizard, you are proactively informed when you are near or at any relevant ...
Outbound SMTP is blocked
Tenancies made after June 23, 2021 are by default not allowed to send e-mail via outbound TCP port 25 to ...
Access to Microsoft Azure expanded to Brazil Southeast (Vinhedo) region and Azure Campinas location
Oracle Cloud Infrastructure and Microsoft Azure cross-cloud connection expanded to Oracle Cloud Infrastructure Brazil Southeast (Vinhedo) region and Azure Campinas ...
DRG functionality expanded in all commercial regions
DRG functionality has been expanded to include the following capabilities:
- You can attach a DRG to more than ...
Opt out of creating DNS records when launching compute instances
When you create a compute instance, you can now opt out of creating a DNS record for the instance's VNIC. ...
Expanded DRG functionality
DRG functionality has been expanded to include the following capabilities:
- You can attach a DRG to more than ...
Inter-Region Latency Dashboard is now available
The Inter-Region Latency Dashboard is now available in all regions. The Inter-Region Latency dashboard provides the average network round-trip latency ...
IPv6 general availability
We are pleased to announce general availability for IPv6 addressing. Going forward Oracle will assign a /56 IPv6 CIDR for ...
Network Visualizer is now available
Network Visualizer is now available in all regions.
The Network Visualizer provides a diagram of the implemented topology of ...
Route filtering on FastConnect is now available
Route filtering on FastConnect is now available. Route Filtering allows you to determine how BGP over FastConnect shares advertised routes ...
Access to Microsoft Azure expanded to Germany Central (Frankfurt) region and Azure Frankfurt and Frankfurt2 locations
Oracle Cloud Infrastructure and Microsoft Azure cross-cloud connection expanded to Oracle Cloud Infrastructure Germany Central (Frankfurt) region and Azure Frankfurt ...
VPN Connect logging is now available
You can now enable and view logs for the VPN Connect service in the console via either VPN Connect or ...
Policy-based Routing with Multiple Encryption Domains
IPSec tunnels in VPN Connect can now support policy-based routing with up to 50 encryption domains. To learn more, review ...
Modifiable VCNs, subnets, and VLANs now available
You can now update VCN and subnet CIDR block information after creation:
- A VCN now supports up to ...
Private DNS is now available
You can now use your own private DNS domain names and fully manage the associated zones and records to provide ...
Bring Your Own IP
Oracle Cloud Infrastructure now allows you to Bring Your Own IP (BYOIP) address space to use with resources in Oracle ...
Oracle Cloud VMware Solution
You can now create and manage VMware enabled software-defined data centers (SDDCs) in Oracle Cloud Infrastructure by using Oracle's VMware ...
Access to Microsoft Azure expanded to US West (San Jose) region and Azure Silicon Valley location
Oracle Cloud Infrastructure and Microsoft Azure cross-cloud connection expanded to Oracle Cloud Infrastructure US West (San Jose) region and Azure ...
Limited availability (LA) of IPv6 addressing in all commercial regions
Beginning today, if you are in commercial regions you can now optionally configure dual stack IPv4/IPv6 in your tenancy to ...
Access to Microsoft Azure expanded to Japan East (Tokyo) region and Azure Tokyo location
Oracle Cloud Infrastructure and Microsoft Azure cross-cloud connection expanded to the Oracle Cloud Infrastructure Japan East (Tokyo) region and Azure ...
CPE Configuration Helper
For customers using VPN Connect (a site-to-site VPN connection to Oracle Cloud Infrastructure):
The Oracle Console has a new ...
Access to Microsoft Azure expanded to Netherlands Northwest (Amsterdam) region and Amsterdam2 location
Oracle Cloud Infrastructure and Microsoft Azure cross-cloud connection expanded to Oracle Cloud Infrastructure Oracle Cloud Infrastructure and Microsoft Azure cross-cloud ...
Connectivity redundancy remedies
For customers who use FastConnect or VPN Connect for connectivity between your on-premises network and VCN:
The Oracle Console ...
Descriptions for security list rules and route rules
You can now provide descriptions for a VCN's security list rules and route rules. Providing descriptions for the rules can ...
Monitoring for service gateways
The Oracle Cloud Infrastructure Monitoring service now supports service gateways. For more information, see Service Gateway Metrics.
Access to Microsoft Azure expanded to Canada Southeast (Toronto) region and Azure Canada Central location
Oracle Cloud Infrastructure and Microsoft Azure cross-cloud connection expanded to Oracle Cloud Infrastructure Canada Southeast (Toronto) region and Azure Canada ...
Additional events for Networking
The Oracle Cloud Infrastructure Events service now supports the following Networking resources:
- DHCP options
- Dynamic routing gateways ...
Virtual networking quickstart
There's a new "VCN with Internet Connectivity" wizard in the Oracle Console. The wizard quickly sets up a VCN with ...
Public IPs now available in JSON format
Public IP address ranges for VCNs and the Oracle Services Network are now published to a JSON file which you ...
VPN Connect IKEv2 and other additions
VPN Connect now supports Internet Key Exchange version 2 (IKEv2), additional crypto algorithms, and NAT-T.
For a list ...
Additional events for Networking
The Oracle Cloud Infrastructure Events service now supports the following Networking resource: service gateways. For more information, see Services that ...
Events for NAT Gateway and Notifications
The Oracle Cloud Infrastructure Events service now supports topics and subscriptions (Notifications service) and NAT gateways (Networking service). For more ...
Move more network resources between compartments
In addition to VCNs, subnets, route tables, security lists, service gateways, and NAT gateways, you can now move these network ...
IPv6: Government Cloud only
IPv6 addressing is now supported in the Oracle Cloud Infrastructure Government Cloud only. For more information, see these topics:
...Transit routing for private access to Oracle services
There's a new transit routing scenario that gives your on-premises network private access to Oracle services through the connected VCN's ...
Move Network resources between compartments
You can move VCNs, subnets, route tables, security lists, service gateways, and NAT gateways from one compartment to another. See ...
Network security groups
You can now create network security groups (NSGs), which are another method besides security lists for implementing security rules in your virtual cloud network (VCN).
Transit routing through a private IP
The advanced VCN routing scenario called transit routing now also supports the ability to route through a private IP address ...
Monitoring for FastConnect and VPN Connect
The Oracle Cloud Infrastructure Monitoring service now supports both FastConnect and VPN Connect.
For more information, see these topics: ...
VPN Connect quickstart workflow
The Oracle Console now includes a VPN Connect workflow to help you quickly set up an IPSec connection between your ...
Access to Microsoft Azure
Oracle and Microsoft have created a cross-cloud connection between Oracle Cloud Infrastructure and Microsoft Azure in certain regions. This connection ...
IPSec VPN improvements: BGP support and custom shared secret
With this release, there are two changes related to managing an Oracle Cloud Infrastructure IPSec VPN.
BGP Dynamic Routing ...
IPSec VPN improvements: changing static routes and CPE IKE identifier
With this release, there are two changes related to managing an Oracle Cloud Infrastructure IPSec VPN.
Changing Static Routes ...
Service gateway access to Oracle Services Network
The service gateway now offers access to multiple services in the Oracle Service Network. The Oracle Services Network is ...
Regional subnets
You can now create regional subnets, which are not specific to a particular availability domain, but span all availability domains in the region.
Transit routing
You can implement an advanced VCN routing scenario called transit routing. It enables communication between an on-premises network and ...
Editing subnets: Changing which security lists and route table are used
Before this release, when you created a subnet, you specified which security lists, route table, and set of DHCP options ...
NAT gateway
You can now add a NAT gateway to your VCN to perform Network Address Translation (NAT). A NAT gateway gives ...
Resolved known issue: Existing instances in a subnet don't get updated list of DNS servers in DHCP options
This Networking service known issue has been resolved:
Existing instances in a subnet don't get updated list of DNS ...
Service gateway with private access to Object Storage from a VCN
The resources in your VCN can now use a service gateway to access Object Storage over a private connection that ...
Connection between Oracle Cloud Infrastructure Classic and Oracle Cloud Infrastructure
You can ask Oracle to provision a connection between your Oracle Cloud Infrastructure Classic environment and Oracle Cloud Infrastructure environment. ...
Windows secondary VNICs on certain shapes
Certain Windows instance shapes now support secondary VNICs. For more information and a script for configuring Windows to recognize a ...
Tags for Reserved Public IPs
You can now apply tags to reserved public IPs. See Overview of Tags.
Tags for VNICs
You can now apply tags to virtual network interface cards (VNICs). See Overview of Tags.
Tags for more Networking service resources
You can now apply tags to these Networking service resources:
- customer-premises equipment (CPE) objects
- dynamic routing gateways ...
Remote VCN peering (across regions)
You can now peer VCNs remotely (across regions). For more information, see Remote VCN Peering (Across Regions).
Public IPs
You can now create reserved public IPs, and move them between your instances in a given region. You can ...
FastConnect public peering
You can now create public virtual circuits with Oracle Cloud Infrastructure FastConnect. For more information, see FastConnect Overview.
...Easy VCN deletion
The Console now supports a VCN "Delete All" function that lets you click one button to delete a VCN, its ...
Local VCN peering
You can connect two VCNs in the same region so their resources can communicate without routing the traffic over the ...
Private IPs as route targets
You can now route a subnet's traffic to an instance in your VCN. For more information, see Using a Private ...
Secondary VNICs and secondary private IPs
Each instance automatically comes with a primary VNIC and a primary private IP address, and now you can add secondary ...
VCN IP address ranges
You can now create a VCN using any valid IP address range. Oracle recommends using one of the private IP ...
Private subnets
When creating a subnet, you can designate it as private, which means instances in the subnet cannot have public IP ...
FastConnect
Your existing network and VCN can communicate over a private connection that doesn't traverse the internet. For more information, see ...
DHCP options
A new Search Domain DHCP option is now available. For more information, see DHCP Options and DNS in Your Virtual ...
DNS
The Internet and VCN Resolver is now available. For more information, see DNS in Your Virtual Cloud Network.
...Stateless security list rules
Networking service API updates
- Ability to update object names: When you create a Networking object (for example, VCN, subnet, etc.), you can optionally ...