Oracle Cloud Infrastructure Documentation

Setting Up Networking Components

Learn about configuring External Key Management (EKMS) network components.

To allow your external key manager to communicate with Oracle Cloud Infrastructure (OCI), you must have a Virtual Cloud Network (VCN) available in your OCI tenancy. The VCN provides a customizable private network with complete control to your cloud networking environment. For EKMS, you must configure the following networking components in the OCI Networking service:
  • VCN
  • Subnets
  • Internet Gateways
  • Routing Tables
  • Security Rules

You can use the following example scenario to guide your networking configuration:

Creating a VCN

  1. Open the navigation menu , select Networking, and then select Virtual cloud networks.
  2. On the Virtual cloud networks page, select Create VCN.
  3. In the Create VCN workflow, provide the following details:
    • Name: Enter a name for the VCN.
    • Compartment: Select a compartment for the VCN.
    • Under IPv4 CIDR Blocks, set the following parameters:
      • IPv4 CIDR Blocks: Provide IPV4 CIDR blocks for the VCN. For example, 10.0.0.0/16.
  4. Select Create VCN.

See Creating a VCN in the Networking documentation for more information.

Configuring Subnet

  1. Open the navigation menu , select Networking, and then select Virtual cloud networks.
  2. On the Virtual Cloud Networks list view page, select the name of the VCN you're configuring to view its details page.
  3. Select Subnets, then select Create Subnet.
  4. In the Create Subnet workflow, provide the following details:
    • Name: Enter a name for the subnet.
    • Compartment: Select a compartment for the subnet.
    • Under IPv4 CIDR Blocks, set the following parameters:
      • IPv4 CIDR Blocks: Provide IPV4 CIDR blocks for the Subnet. Select private subnet or public subnet depending on your requirements. For example, 10.0.0.0/16.
  5. Select Create Subnet.

See Creating a Subnet in the Networking documentation for more information.

Creating Internet Gateway

Complete the following steps to configure an internet gateway.
  1. Open the navigation menu , select Networking, and then select Virtual cloud networks.
  2. On the Virtual Cloud Networks list view page, select the name of the VCN you're configuring to view its details page.
  3. Select Gateways, then select Create Internet Gateway.
  4. In the Create Internet Gateways workflow, provide the following details:
    • Name: Enter a name for the internet gateway.
    • Compartment: Select a compartment for the internet gateway.
    • Select Advanced options, then in the Routable Table Association section, add the route table you need. In this example configuration, the default route table is used.
  5. Select Create Internet Gateway.

See

Creating a Routing Table

  1. Open the navigation menu , select Networking, and then select Virtual cloud networks.
  2. On the Virtual Cloud Networks list view page, select the name of the VCN you're configuring to view its details page.
  3. Select Routing, then select Create Route Table.
  4. In the Create Routing Table workflow, provide the following details:
    • Name: Enter a name for the routing table.
    • Compartment: Select a compartment for the routing table.
    • Under Route Rules, select + Another Route Rule. In this example scenario, access to the VCN is through the internet, so the example route rule has 0.0.0.0/0 for the destination CIDR value.
  5. Select Create.

Creating a Security List

  1. Open the navigation menu , select Networking, and then select Virtual cloud networks.
  2. On the Virtual Cloud Networks list view page, select the name of the VCN you're configuring to view its details page.
  3. Select Security, then select Create Security List.
  4. In the Create Security List page, provide the following details:
    • Name: Enter a name for the routing table.
    • Compartment: Select a compartment for the routing table.
    • Under Allow Rules for Ingress, select + Another ingress Rule and provide the following details:
      • Stateless: Enable this option using the switch.
      • Source Type: Select CIDR.
      • Source CIDR: Provide the source CIDR address.
      • IP Protocol: Select the IP protocol as TCP.
  5. Select Create Security List.