Home / OCI
Compute, block storage, CLI and tenancy operations on Oracle Cloud Infrastructure. 145 posts.
Build an event-driven remediation loop. An Events rule catches a risky change, an OCI Function using resource principals fixes it and posts a notification. Includes IAM policies, a Python function, testing and the safety rails that stop automation fighting your engineers.
Choose between full clones, metadata clones, clones from backup and refreshable clones on Autonomous Database. Create and refresh them from the CLI, mask data for test, use refreshable clones for reporting offload, and know the limits that bite.
Pick a shape and image, create an SSH key pair, launch an Oracle Linux instance from the CLI, connect directly or through the Bastion service, and know which default user to use for each image.
The OCI vocabulary every new engineer trips over. What a tenancy, compartment and OCID are, how regions, availability domains and fault domains relate, and CLI commands to find your way around.
Create a block volume, choose paravirtualized or iSCSI attachment, format and mount it on Linux, write a safe /etc/fstab entry with nofail, and detach it cleanly.
What OCI Cloud Shell gives you out of the box, how to change region and profile, keep files in its home directory, reach private resources with Cloud Shell networking, and its limits so you know when to use a real workstation.
Logs stopped reaching the bucket, stream, function or SIEM. Read the connector's state and error metrics, fix the policy or target, then reactivate and prove data is flowing.
Go beyond "manage all-resources in compartment". Use request.principal, request.operation, target and tag-based conditions to scope access precisely, let teams own resources by tag, and avoid the conditions that silently grant nothing.
Route spoke-to-spoke, on-prem and internet traffic through an OCI Network Firewall in a hub VCN. DRG route tables and import distributions, VCN ingress route tables, symmetric return paths and the checks that prove traffic is really inspected.
Design OCI private DNS for many VCNs and on-prem. Share private views across VCN resolvers, create listening and forwarding endpoints, set forwarding rules in both directions, and debug resolution with dig from the right place.
How OCI security lists and NSGs differ, how they combine, why stateless rules break replies, and a step-by-step checklist when you cannot reach an instance on SSH or an application port.
Use the Oracle Cloud Agent Run Command plugin to run a shell or PowerShell script on an instance with no SSH key, no bastion and no open port, and collect the output.
A bucket was switched to public or a long-lived pre-authenticated request was shared. Make it private and revoke PARs within minutes, use audit and access logs to learn what was read and by whom, and close the gaps that allowed it.
Right after a wallet rotation, applications fail with ORA-29024, ORA-28860 or SSL handshake errors. Confirm the rotation, distribute the new wallet fast, or switch suitable clients to TLS without a wallet, then make rotation a planned change.
After a database or Grid Infrastructure patch, applications get ORA-12514 (listener does not know of service) or ORA-12541. Check the database and listener, re-register services, start application services that did not come back, and verify with srvctl.
After patching or a reboot, a production instance never comes back and the serial console shows emergency mode. Get a console session, fix /etc/fstab or the missing block volume, boot, and add nofail and tests so one bad mount cannot take a server down.
A node pool cycle or upgrade stops part-way. Old nodes are cordoned and cannot drain, new nodes do not join, and capacity drops below what the workload needs. Unblock drains, fix the new nodes, restore capacity and finish the upgrade safely.
Queries on Autonomous Database are slow or queue while CPU isn't obviously maxed. Read resmgr waits, check which service (consumer group) each session uses, then fix service choice, shares, concurrency and scaling.
The standby falls minutes or hours behind. Separate transport lag from apply lag, check archive gaps, redo rate versus network bandwidth, and standby I/O, then fix each with Data Guard Broker and OCI settings.
With FastConnect primary and IPSec VPN backup, some flows go out over one path and back over the other, and on-premises firewalls drop them. Learn how OCI and your router choose routes, and set BGP so both directions agree.
A compartment delete goes to Deleting and then back to Active. Find what is still inside it in every subscribed region, including policies, child compartments and vaults, and clean up or move it safely.
Spokes can't reach each other or on-premises, or traffic skips the hub firewall. Trace the DRG attachment's route table, its import distribution and the hub VCN's ingress route table, then fix them step by step.
After enabling source IP preservation on an OCI Network Load Balancer, some clients hang while others work. Understand how replies travel back, fix security rules and routes, and handle clients in the same subnet as the backends.
OCI shows the new VNIC or private IP as attached, but the OS has no address or replies leave on the wrong interface. Configure Oracle Linux and Ubuntu with oci-network-config, nmcli or netplan and policy routing.
New pods in OKE stay in ContainerCreating or Pending with IP allocation errors. Work out whether the pod subnet, the node's VNIC capacity or max-pods setting is the limit, and fix it without rebuilding the cluster.
Find which OCI instances and processes still call the v1 metadata endpoints, test IMDSv2, switch instances to "Version 2 only" and make new launches default to it.
OCI API Gateway's support for the X-XSS-Protection response header is deprecated, with an effective date of 11 February 2027. Browsers have ignored that header for years anyway. Replace it with a Content-Security-Policy, set either by the backend or by a response header transformation policy.
Oracle announced on 6 October 2026 that Application Dependency Management (ADM) is being retired as a public OCI service. New onboarding stopped on 10 October, Oracle asks customers to get in touch by 30 October, and the final date is no earlier than 31 December 2026. Find where ADM is used, export results, and move scanning into your pipeline.
Three features inside OCI Database Management were deprecated on 29 January 2026 and become obsolete on 29 January 2027. Work out which ones you use, then move MySQL HeatWave monitoring, SQL regression checks and database patch detection to their replacements.
One table of the OCI service changes announced in 2026, with the date that matters and what to do, so each one gets an owner before it turns into an outage. Covers Fleet Application Management, Data Safe, Database Migration, Compute audit events, API Gateway, Data Science, Database Management and ADM.
OCI Compute is deprecating version 1 audit events for instance pools and cluster networks; from 30 June 2027 only version 2 events (names with a V2 suffix) are emitted. Find every rule, query and script that matches the old names and update them now, while both versions exist.
Copy-paste OCI Logging Search queries for application errors, Audit events, load balancer access logs and VCN flow logs, plus running them from the OCI CLI.
Set up OCI Object Storage lifecycle rules with the CLI, add the service IAM policy they need, and avoid the replace-not-merge trap that silently drops existing rules.
Fix OCI instances that show UNREACHABLE or REGISTRATION_ERROR in OS Management Hub, or whose update jobs never leave Accepted. Check the plugin, policy, service gateway, clock and agent logs.
Quick CLI and console recipes to break OCI spend down by service, compartment and tag, find daily spikes, and pull the detailed cost reports for your own analysis.
Build a golden image from a prepared instance, export it to Object Storage, and import it in another region or tenancy. Includes preparation steps, CLI commands and checks for images that won't boot.
Work out whether mail failed at submission, was suppressed or bounced, then fix SMTP credentials, approved senders, DKIM, port and limit problems.
When a launch script on an OCI instance does nothing, check whether cloud-init ran, whether the user data reached the instance, and whether the script failed. Use the cloud-init logs and the instance metadata service.
Moving many files or very large files into OCI Object Storage is slow with one-by-one put. Use multipart uploads, bulk-upload with parallelism, and sync for repeat runs, then verify with checksums and counts.
Read the job log, cancel a stuck job safely, fix permission, conflict and "already exists" errors, and repair the stack state after a partial apply.
OKE pods fail to pull from OCI Container Registry because of a wrong image path, a missing or wrong pull secret, an expired auth token, policies, or no network route. Read the pod event, then fix the matching layer.
A design guide for patching OCI instances (and on-prem servers) with OS Management Hub. Promote tested package sets through dev, test and prod lifecycle environments, group instances so HA pairs patch separately, schedule jobs in maintenance windows, report compliance and handle exceptions.
Turning Cloud Guard on is easy; running it so that problems get fixed is the hard part. Design targets and cloned recipes per environment, tune detector risk levels, route problems to owners, decide where responders act automatically, and use Security Zones to prevent the worst misconfigurations in production compartments.
A design guide that maps workload tiers to disaster recovery patterns on OCI. Classify workloads by business impact, translate RTO and RPO into backup-restore, pilot light, warm standby or active-active, map compute, data, network and identity to OCI services, and orchestrate with Full Stack DR.
OCI offers several ways to run Oracle Database, and the right one depends on control needs, scale, availability targets and where the applications live. Compare who manages what on each option, walk a decision path, check compatibility blockers, and plan HA, DR and licensing together with the choice.
A design guide for deciding where a workload runs on OCI. Match the workload's shape and the team's operating capacity to VMs, bare metal, OKE (managed or virtual nodes), Container Instances or Functions, and settle patching, scaling and fault-domain placement during design.
A design guide for matching data to OCI storage services. Decide by access method and sharing model, then compare performance, availability scope, snapshots and replication, and cost model. Includes common workload mappings and the traps that cause slow or fragile designs.
How traffic enters an OCI workload decides its security controls and failover behaviour. Match the need to the flexible Load Balancer, Network Load Balancer, API Gateway, WAF and DNS traffic steering, combine them in proven layers, and settle certificates, timeouts and origin protection during design.
OCI can run in public regions, separate sovereign and government realms, in your own data centre as Dedicated Region or Cloud@Customer, and inside other clouds. Evaluate residency, sovereignty, latency, service availability, capacity, DR pairing and operating model before committing, and record the decision.
A design guide for how container images reach OKE and Container Instances. Structure OCIR repositories and access, curate base images, scan with the Vulnerability Scanning Service, sign images with Vault keys and enforce signature verification on OKE, and keep repositories clean with retention.
OCI separates tenancy service limits (set by Oracle) from compartment quotas (set by you), and both differ from physical capacity. Inventory the limits your design needs, check availability before launches and DR, use compartment quotas to share capacity fairly, reserve capacity where it matters and make it a design-review gate.
A design guide for connecting on-premises sites to OCI. Choose FastConnect or IPSec VPN by bandwidth and latency needs, pick a redundancy model matching business impact, design DRG routing and BGP preferences, decide on encryption over FastConnect and plan monitoring and failover tests.
A design guide for encryption keys on OCI. Decide when Oracle-managed keys are enough and when customer-managed keys are needed, choose between default vaults, virtual private vaults, Dedicated KMS and External KMS, structure vaults and keys per workload, write IAM policies that separate key admins from users and plan rotation and DR.
A practical way to review an existing OCI workload using the OCI Well-Architected Framework's pillars. Gather evidence from Cloud Advisor, Cloud Guard, Monitoring and cost data before the session, ask concrete questions per pillar, rate risks with the people who run it, and turn findings into an owned backlog.
OCI has several services that move messages and events, each built for a different job. Decide by whether you're queueing work, broadcasting notifications, reacting to resource changes, processing ordered streams or moving data between services, and design retries, dead-letter handling and idempotency from the start.
Applications on OCI shouldn't use user API keys. Map each compute type to its native identity - instance principals, resource principals or OKE workload identity - write policies scoped to the workload, handle on-premises and CI cases, and set guardrails that keep API keys rare.
Autonomous Database bills compute per ECPU hour and storage per GB, so idle and oversized databases cost real money. Right-size base ECPUs from usage, let compute auto scaling cover peaks, stop non-production databases out of hours, consolidate small databases into elastic pools and pick the right licence model.
Logging costs grow with every service log and custom agent log turned on. Find the largest log groups and sources, keep only the logs you use, set retention per log, archive to Object Storage with Connector Hub, and use Log Analytics' active vs archival storage deliberately.
Exadata Database Service bills enabled CPU by the hour, so leaving every VM cluster at peak capacity wastes money. Measure CPU per VM cluster and database, scale enabled CPUs online on a schedule, consolidate databases with Resource Manager and instance caging to share capacity safely, and review storage and licensing.
Every tenancy accumulates resources that cost money and do nothing - detached volumes, preserved boot volumes, old manual backups, idle load balancers and forgotten test databases. Search for each type across compartments, confirm owners, clean up safely with a backup-first approach and keep it from coming back.
VM DB systems are often provisioned with more CPU, a higher edition and more storage than they use. Measure database load, scale CPU down online where supported, pick the edition by the features you really use, apply the right licence model, right-size storage and stop non-production systems.
OCI Block Volume performance is set in Volume Performance Units (VPUs) per GB, and many volumes run at a level that doesn't match their use. Measure IOPS and throughput, pick Lower Cost, Balanced, Higher Performance or Ultra High Performance per volume, enable auto-tune to save on detached volumes and absorb peaks, and remember the instance-side limits.
OCI flexible shapes let you pay for exactly the OCPUs and memory you need, but many instances still carry launch-day sizing. Measure real CPU and memory use, trim OCPU and memory independently, use burstable baselines for mostly idle servers, and test Ampere shapes for Linux workloads.
OCI Functions can take seconds on the first call after idle, which hurts APIs behind API Gateway. Measure cold starts, shrink images and start-up work, size memory deliberately, use provisioned concurrency only for latency-sensitive functions, and tune timeouts and invocation patterns.
Block and boot volume backups are stored in Object Storage and grow with retention, full backups and cross-region copies. Review which policies protect which volumes, use custom policies by tier, prefer incremental schedules with periodic fulls, copy cross-region only for DR tiers, and expire manual backups.
OKE clusters waste money through over-requested pods, fixed-size node pools and expensive shapes for light workloads. Right-size requests, enable the Cluster Autoscaler add-on, choose between managed and virtual nodes per workload, add Ampere and preemptible node pools, and decide where basic vs enhanced clusters make sense.
OCI alarms that fire on every short spike or during maintenance teach teams to ignore notifications. Measure which alarms fire most, tune MQL intervals and statistics, use pending duration, split notifications by severity, suppress during planned work and alert on symptoms that matter.
OCI load balancers are often created with high fixed bandwidth for each app. Measure real bandwidth and connections, set flexible minimum and maximum bandwidth sensibly, use the Network Load Balancer where you don't need layer 7 features, consolidate small apps with hostname routing and tune backend sets for smoother deployments.
Dev and test environments run all week but are used during working hours. Use OCI Resource Scheduler (or Functions for unsupported resources) to stop and start instances, instance pools, Autonomous Databases and DB system nodes on a schedule, select resources by tags, give teams an override and track savings.
OCI's network pricing is simpler than most clouds, but egress beyond the free allowance, cross-region replication and traffic hairpinned through firewalls still add up. Break down network cost, route Oracle Services Network traffic through a service gateway, review cross-region copies and right-size firewalls and gateways.
Preemptible instances run on spare OCI capacity at a discount but can be reclaimed at any time. Pick workloads that tolerate interruption, launch preemptible VMs and OKE node pools, design for restarts with checkpoints and retries, and keep a non-preemptible baseline for critical work.
Adopt existing OCI resources into Infrastructure as Code. Use Resource Discovery to generate Terraform from a compartment, clean it into modules, reach a no-change plan, run it through Resource Manager or a pipeline and detect drift.
Replace local OCI users with single sign-on from Microsoft Entra ID. Set up SAML federation, SCIM provisioning of users and groups, map groups to OCI policies, keep a break-glass local admin and retire local passwords.
Restructure a tenancy where resources live in the root compartment or a couple of catch-all compartments. Design the target compartment tree, move resources safely, rebuild policies, and add tagging, quotas, budgets and Cloud Guard.
Stop SSH-ing into servers to read logs. Collect OS, application and OCI service logs centrally, parse and search them in Logging Analytics, build dashboards and alerts, and set retention and cost controls.
A physical migration of an on-premises Oracle database to an OCI VM DB system. Build the target, instantiate a standby from an RMAN backup or duplicate, sync with Data Guard over FastConnect, switch over and make OCI the primary.
Plan a migration from x86 shapes to Ampere Arm shapes on OCI. Check software compatibility, build multi-arch images for OKE, mix node pools during rollout, benchmark fairly and keep x86 where it still makes sense.
Replace tape or disk backup targets for on-premises Oracle databases with OCI Object Storage using the Oracle Database Cloud Backup Module. Install, configure the SBT channel, encrypt, set retention and lifecycle to Archive, and test restores.
Retire the always-on VM that runs cron jobs and tiny internal APIs. Package scripts as OCI Functions, trigger them on a schedule or from events, expose HTTP endpoints through API Gateway and use resource principals instead of keys.
Plan a datacentre exit to Oracle Cloud VMware Solution. Size the SDDC, plan VLANs and the VCN, connect over FastConnect, migrate with HCX in waves and use OCI-native services next to the SDDC afterwards.
Move Linux NFS shares from on-premises filers or self-managed servers to OCI File Storage. Design mount targets and export options, copy with parallel rsync or fpsync, cut over clients and set up snapshots and replication.
Replace an ageing on-premises Exadata with Exadata Database Service on Dedicated Infrastructure in OCI or Exadata Cloud@Customer in your datacentre. Choose the deployment, size it, migrate databases with Data Guard and adapt operations to the cloud tooling.
Move Oracle databases to Autonomous Database using Zero Downtime Migration (ZDM) logical online migration. Assess with CPAT, prepare source and target, configure Data Pump and GoldenGate replication, rehearse and switch over.
How Oracle Database@Azure works, when it beats Oracle on Azure VMs or a cross-cloud interconnect, how to plan networking and identity, and how to migrate an on-premises Oracle database into it with Data Guard or ZDM.
Use the Oracle Cloud Migrations service to discover source VMs, get shape recommendations, replicate disks and launch OCI instances. Covers prerequisites, migration plans, test launches, cutover and clean-up.
Move Java EE applications running on WebLogic Server VMs to Kubernetes on OKE. Export the domain with WDT, build an image with WebLogic Image Tool, deploy with the WebLogic Kubernetes Operator and expose it through an OCI load balancer.
Fix OCI File Storage mounts that hang, time out, return access denied or write as nobody, by checking security rules, export options, mount target IPs and the client.
A step-by-step runbook to change an OCI VM's shape or flex OCPU and memory, covering limits, image compatibility, the reboot, rollback and post-change checks.
Fix workloads that use instance or resource principals and start failing with 404 NotAuthorizedOrNotFound. Check the dynamic group matching rule, the policy statement and its domain prefix, compartment moves, and the token on the instance.
Restore service when Autonomous Database hits its session limit or runs at 100% CPU. Find the sessions and SQL responsible, kill safely, scale ECPUs or enable auto scaling, and fix connection pools and service choices.
Replace an expired TLS certificate on an OCI flexible load balancer, whether it uses a load balancer certificate bundle or the OCI Certificates service. Update the listener without dropping other settings, then automate renewal and expiry alerts.
Respond to leaked OCI credentials. Identify the credential type, delete it, block the user if needed, search the Audit log for what was done with it, clean up, and move workloads to instance and resource principals.
Recover an Oracle database on an OCI VM DB system that stops because DATA or RECO storage is full. Confirm which area is full, free space safely, scale the DB system storage online and set alarms so it doesn't happen again.
Fix applications that start with an empty data directory because an iSCSI-attached OCI block volume didn't reconnect after a reboot. Reconnect the target, make it automatic, harden fstab, and consider paravirtualized attachments.
Restore name resolution after a public zone record, private zone, private view or VCN resolver change in OCI DNS. Check the record, the resolver's attached views and forwarding rules, revert from Audit details, and lower TTLs for the next change.
Troubleshoot an OCI FastConnect outage from the provider and cross-connect state through the virtual circuit, BGP session, advertised routes and DRG route tables, and confirm IPSec VPN failover takes over.
Restore access after IAM policies were deleted or a policy update replaced its statements. Confirm what's missing with Audit, rebuild statements from IaC or evidence, handle identity domain admin lockout, and keep policies in version control.
Recover an OCI compute instance that fails to boot after a bad fstab entry, kernel update, full disk or broken network config. Detach the boot volume, attach it to a rescue instance, fix it and put it back, with a backup first.
Get deleted or overwritten objects back in OCI Object Storage. Stop the deleter, list object versions, restore previous versions, fall back to a replication target or backups, and use retention rules to block the next accident.
Restore access to block volumes, Object Storage buckets and databases encrypted with a customer-managed OCI Vault key that was disabled or scheduled for deletion. Cancel deletion, re-enable the key, fix IAM, find who did it.
Restore kubectl access to an Oracle Kubernetes Engine cluster. Check the cluster state, public vs. private endpoint, the endpoint NSG and route, and the OCI CLI token that the kubeconfig uses for authentication.
Recover after an OCI compute instance is terminated. Check whether the boot volume was preserved, relaunch from it or from a backup, reattach block volumes, restore the private IP and DNS, and protect instances from the next accidental terminate.
Recover from an outage caused by a security list, network security group or route table edit. Use Audit to find the change, understand how security lists and NSGs combine, revert safely and verify with VCN flow logs and Network Path Analyzer.
CPU and memory graphs are empty, alarms show no data, or Cloud Agent plugins show INVALID. Check the agent, its route to OCI, the clock and the plugin config, in that order.
Create an OCI bastion, open managed SSH and port forwarding sessions to private instances and databases, and fix the usual connection failures.
Enable a local Autonomous Data Guard standby, understand automatic failover and RPO/RTO, run a switchover test, and make applications reconnect correctly.
Settings that make an Autonomous Database production-ready on day one, covering network access, wallet vs TLS, admin and application users, auto scaling, backup retention and maintenance.
Choose between a cross-region Autonomous Data Guard standby and backup-based disaster recovery, set them up, perform switchover or failover, and handle connection strings after a region change.
Tell queuing from CPU saturation from bad SQL in Autonomous Database, then fix it with the right service, auto scaling or SQL tuning.
Fix the usual Autonomous Database connection failures by checking mTLS vs TLS, the wallet location, access control lists, private endpoints and service names.
Fix RDP problems on OCI Windows instances, covering the initial opc password, security rules on 3389, the Windows firewall and NLA, and using Run Command or a console connection when locked out.
Create a cross-region standby for a Base Database Service DB system using the OCI-managed Data Guard association, check transport and apply lag, and perform switchover, failover and reinstate.
Resize a boot or block volume without stopping the instance, rescan the device, and extend the filesystem with oci-growfs on Oracle Linux or manually elsewhere.
Build an instance configuration and instance pool spread over fault domains or ADs, attach it to a flexible load balancer with HTTP health checks, and add autoscaling and rolling updates.
Spread OKE nodes and pods across fault domains or ADs, configure PodDisruptionBudgets, LB annotations and storage so applications keep running through node failures, upgrades and maintenance.
Store database passwords and API keys as OCI Vault secrets, let instances read them with instance principals, and rotate them without redeploying.
Work through Object Storage connectivity, FRA and archive log space, RMAN errors and tooling health when automatic backups on an OCI DB system fail.
Protect compute data across regions with asynchronous block and boot volume replication, keep multi-volume consistency with volume groups, and use cross-region backup copies as a cheaper alternative.
Create defined tag namespaces with tag defaults per compartment, set budgets with forecast alerts, use quotas to cap spend, and review cost reports monthly.
Orchestrate cross-region failover of compute, volumes, databases and load balancers with OCI Full Stack Disaster Recovery, using DR protection groups, generated plans, custom steps and prechecks.
What availability domains and fault domains protect against, how to place HA pairs in single-AD and multi-AD regions, and which OCI services are regional, AD-bound or FD-aware.
Set up identity domains with federation and MFA, write least-privilege policies by compartment, use dynamic groups for workloads, and protect tenancy administrator access.
Policy syntax, the four verbs, resource families, dynamic groups, conditions and service policies, plus how to debug NotAuthorizedOrNotFound.
Use an instance console connection to get into a Linux instance that won't boot or accept SSH, then fix fstab, sshd or firewall problems from maintenance mode.
Design an OCI compartment hierarchy, deploy the CIS-aligned OCI landing zone with Terraform, and add Security Zones, quotas and tag defaults before workloads arrive.
Tell capacity shortages from tenancy service limits and compartment quotas, and get the instance launched with the right fix for each.
Read the health checker's status message, then check security rules, the host firewall and the health check settings to bring backends back to OK.
Which logs to enable before you need them, plus Logging Search queries for VCN flow logs, load balancer errors, Object Storage access and Audit events.
Connect spoke VCNs and on-premises through a Dynamic Routing Gateway, route traffic through a hub VCN firewall, and set up private DNS views and resolvers for hybrid name resolution.
Production settings for OCI Object Storage buckets, including visibility, IAM-scoped access, customer-managed keys, versioning, retention rules, lifecycle tiers, logging and Cloud Guard detection.
Create a replication policy from a source bucket to a DR-region bucket, set the required IAM policy, monitor last sync, and stop replication to make the destination writable during failover.
Move older objects to Infrequent Access or Archive, delete expired data, clean up multipart uploads, and protect critical buckets with versioning and retention rules.
Why OCI returns 404 when you lack permission, how to check namespace, region and policies, and how to create and debug pre-authenticated requests for customers.
Turn on audit retention, service logs, a log archive, baseline alarms, Events-to-Notifications routing and Cloud Guard with a reporting region, so every later workload is observable from day one.
Check tunnel status, compare IKE/IPSec parameters with the CPE, fix BGP or static routing, and verify DRG and VCN route tables when the OCI VPN won't pass traffic.
Which gateway each kind of traffic needs, how route tables and security rules interact, and how to use Network Path Analyzer to prove where a packet stops.
Use WAF logs to find which protection, access control or rate-limit rule blocked a request, then add a narrow exception instead of switching protection off.
Create a production Oracle Kubernetes Engine cluster with a private API endpoint, VCN-native pod networking, node pools spread across fault domains or ADs, workload identity and upgrade discipline.
Troubleshoot Oracle Container Engine for Kubernetes worker nodes that don't become Ready and pods that won't schedule, from security rules and capacity to pod networking IPs.
Create a Notifications topic, write MQL alarm queries for CPU, memory, load balancers and databases, and avoid the common no-data and noisy-alarm problems.
Create a single-node VM DB system with the right shape, storage and edition, configure automatic backups to Object Storage, patching, monitoring and access, and know its recovery limits.
Shape, fault domain, boot and block volume settings, backups, Bastion access, OS Management, monitoring and the recovery behaviour you get from a single OCI instance.
Deploy a 2-node RAC VM DB system, configure services and SCAN connections with Application Continuity, do rolling patching, and handle node failures without application outages.
Set up the OCI CLI once, then use these commands to find resources across compartments, start and stop instances, and script output with JMESPath.
Set up policy-based backups, take on-demand backups before changes, restore a boot volume to a new instance and copy backups to another region for DR.
No posts in this category yet.