Overview: Oracle is responsible for performing patches and updates to ExaCC infrastructure every quarter (there is no patch in Dec). That includes: ... Read More
Access OCI Compute Instance in Private Subnet with OCI Cloud Shell
There are several options for securely accessing Oracle Cloud Infrastructure (OCI) compute instances located in a VCN’s private subnet. The efficient option is OCI’s Bastion service. Another secure and faster option is using Oracle OCI Cloud Shell. In this blog, we will cover the steps to use OCI Cloud Shell.
- An Oracle Cloud free trial or paid account
- OCI VCN with a private subnet
- OCI compute instance located in a VCN’s private subnet with API RSA private key
The Oracle Cloud Shell is a web browser-based terminal in the OCI Console that provides access to a Linux shell, with a pre-authenticated OCI Command Line Interface (CLI). It includes a Network Private Access feature. This feature allows you to create an endpoint in the private subnet. This endpoint is governed by the rules in the private subnet’s Security Lists.
- This feature is supported only in the tenancy’s home region. However, with Regular Remote Peering connections you can extend the accessibility to other regions
Step #1: Launch Cloud Shell and configure the Private Network Access
1. Navigate to “Cloud Shell” under ‘Developer tools’ next to your Home Region.
2. In the Cloud Shell menu, “Network: Public” > “Private Network Definition List”
3. Click “ Create Private Network Definition List” in the ” Private Network Definition” screen
4. In the “Create Private Network Definition” screen, provide a name, select VCN and private subnet where OCI compute instances are located, then click “Create”
Now, OCI Cloud Shell is connected to a private subnet using a newly created private network definition
Step #2: Connect to OCI Compute Instance
1. In the Cloud Shell command line, change the directory to “.ssh”, create a file, and past the contents of compute instance’s API private key
2. SSH to compute instance using compute instance private IP
You are now connected to the Compute Instance in the Private Subnet.
More from this Author
In this blog, we will demonstrate the steps to peer two VCNs in different regions through a DRG in the same tenancy. This is called a remote VCN ... Read More