2.1.8 Secure Fabric is Recommended and Enabled by Default

Exadata Secure RDMA Fabric Isolation is recommended and enabled by default on all new Oracle Exadata configurations using VM clusters.

Exadata Secure RDMA Fabric Isolation enables strict network isolation for virtual machine (VM) clusters on Oracle Exadata systems that use RDMA over Converged Ethernet (RoCE).

Secure Fabric provides critical infrastructure for secure consolidation of multiple tenants on Oracle Exadata, where each tenant resides in a dedicated VM cluster. Using this feature ensures that:

  • Database servers in separate clusters cannot communicate with each other. They are completely isolated from each other on the network.
  • Database servers in multiple clusters can share all of the storage server resources. However, even though the different clusters share the same storage network, no cross-cluster network traffic is possible.

In the Oracle Exadata Deployment Assistant (OEDA) included with Oracle Exadata System Software release 25.1.0, the option to enable Secure Fabric is selected by default for all new configurations using VM clusters. Secure Fabric is also enabled by default in all OEDA versions commencing with the October 2024 Oracle Exadata System Software release updates (24.1.5, 23.1.19, and 22.1.28).