Upgrade to Pro — share decks privately, control downloads, hide ads and more …

OCI技術資料 : 仮想クラウド・ネットワーク (VCN) 概要

OCI技術資料 : 仮想クラウド・ネットワーク (VCN) 概要

Oracle Cloud Infrastructure (OCI) の技術説明資料、仮想クラウド・ネットワーク (VCN) 概要編 (Level 100) です。

クラウド内に構成する仮想クラウド・ネットワークと、その構成コンポーネント (サブネット、仮想NIC、ゲートウェイ、ルート表、セキュリティ・リスト) と、ネットワークの結合(ピアリング)に関して解説しています。

Transcript

  1. 仮想クラウド・ネットワーク (VCN) 概要 Virtual Cloud Network Level 100 Oracle Cloud

    Infrastructure 2021 6
  2. Safe harbor statement Copyright © 2021, Oracle and/or its affiliates.

    2
  3. • (VCN) • • IP IP • OCI • NAT

    • VPN FastConnect Copyright © 2021, Oracle and/or its affiliates. 3
  4. Copyright © 2021, Oracle and/or its affiliates. 4 VCNとサブネット VCNs

    and Subnets
  5. Oracle Cloud Infrastructure • 5 CIDR • CIDR /30(4 IP)

    /16(65,536 IP) • CIDR • • IP • RFC1918 OCI 翻 • : 169.254.0.0/16 • DBCS : 192.168.16.16/28 ( ) • Exadata CS : 192.168.128.0/20 ( ) • (VCN) Copyright © 2021, Oracle and/or its affiliates. 5 2 1 VCN 10.0.0.0/16
  6. CIDR (Classless Inter-Domain Routing) • xxx.xxx.xxx.xxx/n n 翻 ) /24

    = 255.255.255.0 • 192.168.1.0/24 IP : 192.168.1.0-192.168.1.255 • 128 64 32 16 8 4 2 1 →27 26 25 24 23 22 21 20 • 192 1 1 0 0 0 0 0 0 • 192.168.1.0/27 IP :192.168.1.0-192.168.1.31 • 8 32 /27 (255.255.255.224) • Subnets – 2 x 2 x 2 = 8. Hosts – 2 x 2 x 2 x 2 x 2 = 32 • Subnetworks – 192.168.1.0/27, 192.168.1.32/27, 192.168.1.64/27… CIDR Copyright © 2021, Oracle and/or its affiliates. 6 192.168.1.0 –192.168.1.255
  7. VCN CIDR 2 • – (AD) • – 2 •

    – NIC IP • – NIC IP IP 2 1 翻 ( 10.0.0.0/24 .0, .1, .255 ) Copyright © 2021, Oracle and/or its affiliates. 7 2 1 VCN 10.0.0.0/16 10.0.0.0/24 10.0.1.0/24 10.0.2.0/24
  8. Copyright © 2021, Oracle and/or its affiliates. 8 仮想NICとIPアドレス Virtual

    NICs and IP Addresses
  9. 1 NIC NIC 1 IP 1 NIC ( ) NIC

    IP IP 31 (IP ) IP IP 1 NIC IP Copyright © 2021, Oracle and/or its affiliates. 9 vNIC • IP • IP #1 #2… #31 vNIC • IP • IP #1 #2… #31 SUBNET A, 10.0.1.0/24
  10. vNIC1 (VM) 1 NIC OS NIC OS • VM1 :

    NIC1 • VM2 : NIC 2 VCN • : UTM 2 • VM3 : NIC 2 VCN • : NIC Copyright © 2021, Oracle and/or its affiliates. 10 1 A 10.0.0.0/24 VCN X 172.16.0.0/24 VM1 VM2 B 10.0.1.0/24 vNIC2 vNIC3 vNIC5 VM3 vNIC4
  11. NIC NIC NIC IP • : NIC IP Copyright ©

    2021, Oracle and/or its affiliates. 11 1 A 10.0.0.0/24 VM1 VM2 Ip1 IP2 IP3 vNIC1 IP4 vNIC1 B 10.0.1.0/24 IP5 IP6 IP7 vNIC3
  12. IP IPv4 IP NIC IP IP IP • Oracle IP

    IP 翻 • • NAT • DRG - IPsec • OKE • Oracle IP • • Autonomous Database IP Copyright © 2021, Oracle and/or its affiliates. 12
  13. 2 IP • IP • IP • • IP •

    IP • IP • • NIC 32 IP IP Copyright © 2021, Oracle and/or its affiliates. 13
  14. Copyright © 2021, Oracle and/or its affiliates. 14 ゲートウェイとルーティング Gateways

    and Routings
  15. VCN 10.0.0.0/16 B 10.0.2.0/24 VCN VCN 1 ( ) VCN

    Copyright © 2021, Oracle and/or its affiliates. 15 IP
  16. VCN 10.0.0.0/16 B 10.0.2.0/24 VCN 翻 • • CIDR •

    CIDR ( ) VCN VCN Copyright © 2021, Oracle and/or its affiliates. 16 CIDR 0.0.0.0/0 : (VCN )
  17. VCN 10.0.0.0/16 B 10.0.2.0/24 IP VCN NAT 1 NAT NAT

    Copyright © 2021, Oracle and/or its affiliates. 17 CIDR 0.0.0.0/0 NAT IP NAT
  18. VCN 10.0.0.0/16 B 10.0.2.0/24 VCN OCI • • OCI •

    • • • NAT • • • DB • VCN Autonomous Database Copyright © 2021, Oracle and/or its affiliates. 18
  19. Oracle Cloud Infrastructure (Tokyo) Oracle Cloud Infrastructure (Osaka) ※ 2021

    5 DRG → OCI • • VCN( ) • VCN • IPsec VPN FastConnect ( ) • Azure InterConnect • VCN FastConnect VPN • DRG • DRG • • (DRG) Copyright © 2021, Oracle and/or its affiliates. 19 VCN VCN Dynamic Routing Gateway Dynamic Routing Gateway VCN Remote Peering Connection Remote Peering Connection FastConnect VPN On-premise Data Center
  20. Copyright © 2021, Oracle and/or its affiliates. 20 ピアリング Peerings

  21. ※ 2021 5 DRG (DRG) VCN DRG VCN LPG 1

    DRG VCN CIDR VCN DRG VCN ( ) VCN (DRG ) Copyright © 2021, Oracle and/or its affiliates. 21 VCN1 10.0.0.0/16 VCN2 192.168.0.0/16 CIDR 192.168.0.0/16 DRG 172.16.0.0/16 DRG CIDR 10.0.0.0/16 DRG 172.16.0.0/16 DRG Route Table Route Table VCN3 172.16.0.0/16 Dynamic Routing Gateway Route Table CIDR 10.0.0.0/16 DRG 172.16.0.0/16 DRG
  22. ※ 2021 5 ※ 2021 5 DRGv2 DRG LPG LPG

    DRG VCN 2 VCN IP 翻 VCN (LPG) CIDR VCN VCN VCN VCN (LPG ) Copyright © 2021, Oracle and/or its affiliates. 22 VCN1 10.0.0.0/16 VCN2 192.168.0.0/16 LPG-1 LPG-2 CIDR 192.168.0.0/16 LPG-1 CIDR 10.0.0.0/16 LPG-2
  23. 2 VCN 2 VCN IP 翻 VCN (DRG) OCI DRG

    (RPC) CIDR VCN VCN Copyright © 2021, Oracle and/or its affiliates. 23 1 VCN1 10.0.0.0/16 192.168.0.0/16 DRG1 10.0.0.0/16 DRG2 Dynamic Routing Gateway 1 Dynamic Routing Gateway 2 RPC1 RPC2 Route Table Route Table 10.0.0.0/16 VCN1 192.168.0.0/16 RPC1 10.0.0.0/16 RPC2 192.168.0.0/16 VCN2 Route Table Route Table VCN2 192.168.0.0/16
  24. Web NAT IPsec VPN ( ) FastConnect ( ) 2

    VCN VCN ( ) 2 VCN VCN ( ) OCI Copyright © 2021, Oracle and/or its affiliates. 24
  25. Copyright © 2021, Oracle and/or its affiliates. 25 トランジット・ルーティング Transit

    Routing
  26. VCN 1 2 VCN ( ) VCN : 3 VCN

    Copyright © 2021, Oracle and/or its affiliates. 26 VCN VCN FastConnect / IPsec VPN VCN
  27. 1. FastConnect/VPN VCN • 1 FastConnect VPN VCN 2. Oracle

    • FastConnect VPN IP VCN Oracle (Object Storage/Autonomous DB) 3. VCN • 2 VCN VCN VCN VCN 3 Copyright © 2021, Oracle and/or its affiliates. 27 OCI Service Gateway VCN ORACLE SERVICES NETWORK Object Storage
  28. Copyright © 2021, Oracle and/or its affiliates. 28 セキュリティ Security

  29. • NIC • ( ) ( ) • • •

    NIC Copyright © 2021, Oracle and/or its affiliates. 29 SUBNET A, 10.0.1.0/24 SUBNET B, 10.0.2.0/24 VCN, 10.0.0.0/16 Security List Security List SUBNET C, 10.0.2.0/24 Security List Direction CIDR Protocol Source Port Dest Port Stateful Ingress 0.0.0.0/0 TCP All 80 Stateful Egress 10.0.2.0/24 TCP All 1521
  30. SUBNET A, 10.0.1.0/24 VCN, 10.0.0.0/16 SUBNET B, 10.0.1.0/24 NSG-A NSG-B

    NSG-A Directio n CIDR Protocol Source Port Dest Port NSG-A Stateful Ingress 0.0.0.0/0 TCP All 80 NSG-B Stateful Ingress 0.0.0.0/0 TCP All 22 • NIC • NSG 翻 ( ) • NSG ( CIDR ) (NSG) Copyright © 2021, Oracle and/or its affiliates. 30
  31. SL NSG 翻 OR • NIC SL • NIC NSG

    Copyright © 2021, Oracle and/or its affiliates. 31 SUBNET A, 10.0.1.0/24 Security List 1 Security List 2 NSG-A NSG-B
  32. 1. • • OCI • Copyright © 2021, Oracle and/or

    its affiliates. 32 1. • 縮 • • Web (HTTP/HTTPS )
  33. Copyright © 2021, Oracle and/or its affiliates. 33 デフォルトのVCN設定、名前解決 Default

    VCN and Internal DNS
  34. 2 1 VCN 10.0.0.0/16 A 10.0.1.0/24 B 10.0.2.0/24 RT SL

    SL VCN • • • DHCP • / • VCN Copyright © 2021, Oracle and/or its affiliates. 34
  35. VCN (DNS) IP 翻 NIC VCN DHCP DHCP • VCN

    VCN DNS VCN ( ) • : VCN IPsec VPN / FastConnect DNS ( DNS IP ) VNC VCN DNS • FQDN : <hostname>.< DNS >.<VCN DNS >.oraclevcn.com FQDN IP IP FQDN • : <hostname>.< DNS >.<VCN DNS >.oraclevcn.com VCN Copyright © 2021, Oracle and/or its affiliates. 35
  36. 1 VCN VCN VCN VCN ( ) / VCN VCN

    OCI VCN Copyright © 2021, Oracle and/or its affiliates. 36
  37. CIDR 0.0.0.0/0 CIDR Dest Ingres s 0.0.0.0/0 Tcp 80 Egres

    s 10.0.2.0/24 Tcp 1521 CIDR Dest Ingress 10.0.1.0/24 Tcp 1521 Egress OCI -1 VCN 10.0.0.0/16 バックエンド、 10.0.2.0/24 フロントエンド、 10.0.1.0/24 SL- X SL- RT- RT- CIDR 0.0.0.0/0 NAT/ /DRG VCN Copyright © 2021, Oracle and/or its affiliates. 37
  38. • (VCN) • • IP IP • OCI • NAT

    • VPN FastConnect Copyright © 2021, Oracle and/or its affiliates. 38
  39. – • https://docs.cloud.oracle.com/ja-jp/iaas/Content/Network/Concepts/overview.htm – (VCN) • https://community.oracle.com/docs/DOC-1019114 VCN Copyright ©

    2021, Oracle and/or its affiliates. 39
  40. Oracle Cloud Infrastructure ( / ) • https://docs.cloud.oracle.com/iaas/api/ - API

    • https://docs.cloud.oracle.com/ja-jp/iaas/Content/General/Reference/aqswhitepapers.htm - • https://docs.cloud.oracle.com/iaas/releasenotes/ - • https://docs.cloud.oracle.com/ja-jp/iaas/Content/knownissues.htm - (Known Issues) • https://docs.cloud.oracle.com/ja-jp/iaas/Content/General/Reference/graphicsfordiagrams.htm - OCI (PPT SVG Visio ) ※ Oracle Cloud Infrastructure Copyright © 2021, Oracle and/or its affiliates. 40
  41. Oracle Cloud Infrastructure • https://oracle-japan.github.io/ocidocs/ - Oracle Cloud Infrastructure •

    https://oracle-japan.github.io/ocitutorials/ Oracle Cloud • https://www.oracle.com/goto/ocws-jp Oracle • https://www.oracle.com/search/events/_/N-2bu/ Oracle Cloud Infrastructure – General Forum ( ) • https://cloudcustomerconnect.oracle.com/resources/9c8fa8f96f/summary Oracle Cloud Infrastructure Copyright © 2021, Oracle and/or its affiliates. 41
  42. Copyright © 2021, Oracle and/or its affiliates. 42 Thank you

  43. None
  44. Our mission is to help people see data in new

    ways, discover insights, unlock endless possibilities.