This post covers Oracle Cloud Infrastructure (OCI) building blocks like Region, Availability Domain (AD), Fault Domain (FD) Tenancy, Compartment, Compute, Virtual Cloud Network (VCN), Identity & Access Management (IAM), and Storage (Block, Object, Shared, Archive)
Note: OCI is part of the IaaS Service model (to know more about the service model please check our previous blog on Cloud Service Model), where OCI also provide Bare Metal Cloud Service (BMCS).
Another offering in IaaS from Oracle is OCI-Classic (or OCI-C) and to find the difference between two and when to use what, check my previous post on OCI vs OCI-C here
If you are just starting out in Cloud then I highly recommend you to go through these first
- Cloud Service Models (SaaS, PaaS, IaaS)
- 12 Point Checklist for DBA for Beginner to Expert Cloud DBA (Facebook Live)
- If you are confused to pick Amazon AWS or Oracle Cloud then check this
- To check tasks performed by Apps DBAs in Cloud here
OCI Offering
- OCI has an Exadata Cloud at Customer, Bare Metal offering or Virtual Machine, you can also bring your own hypervisor (BYOH) for Bare Metal
- OCI Compute comes in various shapes like Standard I/O, High I/O, Dense I/O, and GPU (for High-Performance HP & Machine Learning ML)
Region
OCI Servers & Data is hosted in a region where region is a localized geographic area. As of Dec 2022, there are 41 regions for OCI i.e. London, Sao Paulo, Frankfurt, Ashburn, Phoenix, Canada, Tokyo, Seoul, Mumbai, Dubai, Zurich, Sydney, Osaka, Melbourne, Jeddah, Amsterdam, Montreal, Hyderabad, Chuncheon, San Jose, Newport, Santiago, Vinhedo, Jerusalem, Marseille & Singapore, Paris, Marseille, Milan, Queretaro, Madrid, Stockholm, Abu Dhabi, Singapore, Toronto, Chicago.
- You can have OCI resources (Compute, Network, Storage) in multiple Regions
- When you create Tenancy (Account in Cloud) a Home Region is selected and later you can add more Regions
Availability Domain (AD)
Availability Domain (AD) is one or more data centers located within a region. A region is composed of three availability domains. Services/Resources are either Region-Specific (like VCN) or Availability Domain Specific (like Compute),
Note: AD provide DR capability for any Service
Fault Domain (FD)
- A fault domain is a logical grouping of hardware and infrastructure within an Availability Domain, Provides a higher degree of protection from
unexpected hardware failures or computer hardware maintenance. - Each Availability Domain has 3 Fault Domains., You can optionally select an FD when creating an
instance. Otherwise, OCI will select an FD in that AD - Supported for BM/VM instances in all regions, OCI will place each instance of a RAC database in
a separate FD.
Tenancy
The tenancy is an Oracle Cloud Account given to you when you register for Oracle Public Cloud (OCI).
Compartment
The compartment is a logical container to organize OCI resources (like Compute, Storage, VCN, etc)
- You can restrict access to Cloud Users based on Compartment so create DEV Compartment and servers, network in Dev Compartment only.
- A resource can span across multiple compartments
- In the below diagram, there is one compartment, in 1 Region (note: as of Mar18, there are 4 Regions), 2 Availability Domains, 1 VCN, 5 Subnets, 3 Computes for EBS, 1 Database Cloud Service, 2 Load Balancer as a Service (LBaaS) and 1 Internet Gateway (IGW)
- When a Tenancy is created a ROOT Compartment is created in Home Region (Check Tenancy, Region & Home Region above)
- You can create additional Compartments, assign resources in Compartment and apply Access Policies (part of IAM Service below) to the compartment to restrict who can do what on Resources in these compartments
- Compartments are global in scope meaning they can span across Regions
Instance | Compute (CPU & Memory)
An instance or Compute Instance in OCI can be Bare Metal (You can a Server with no Virtualization and you can bring your own Hypervisor or use as Bare Metal) or Virtual Machine (KVM based hypervisor running on Bare Metal)
OCI compute comes in various shapes like Standard I/O, Dense I/O, Optimized Shapes and for Extreme Performance
Available Shapes BM (Bare Metal)
Available Shapes VM (Virtual Machine)
To know more about Compute check our post on Oracle Cloud Infrastructure (OCI Compute CPU & Memory
Virtual Cloud Network (VCN)
A Virtual Cloud Network (VCN) is a virtual version of a traditional network including subnets, route tables, and gateways.
- A cloud network resides within a single Region but can cross multiple Availability Domains (AD).
- There can be multiple VCN’s within Region or in different Regions.
- You can connect one VCN with another VCN (in the same or different Region) using VCN Peering
To know more about VCN and its component (Click Here)
IAM Service
Identity & Access Management (IAM) service lets you control who has access to what cloud resource using Groups/ Users/ Access Policy (More on IAM on its own dedicated post)
- A Resource is a Cloud represents a Service you can create like Compute Instance, VNC, Compartment, Storage etc
- A user in IAM Service represents Cloud User that can log in to Cloud and manages Cloud Resources
- A group is a collection of Users and is used in Policy to control who can do want on a Resource
- A Policy is a set of rules that control who can do what on a Cloud Resource
- IAM like Tenancy is Globally Scoped so spans across Regions and applicable to entire Account
- You can integrate IAM for OCI with Identity Cloud Service (IDCS) or Microsoft Active Directory Federation (ADFS)
Note: More on IDCS please check here.
Storage Services
On Cloud, you need storage to store Data Persistently. Oracle Cloud Infrastructure (OCI) has Storage Services that offers few storage options.
- Block Volumes: Block storage operates at the raw storage device level and manages data as a set of numbered, fixed-size blocks using protocols such as iSCSI. Block Volumes are Scoped to Availability Domain (AD).
- Object Storage Service: Object storage is independent of a server and ideal storage platform to store very large amounts of unstructured data. Object Storage is scoped to a Region in OCI.
- Archive Storage: The Archive Storage service is perfect for storing data that has long retention periods but is rarely accessed. For storing cold data, archive storage is more affordable than object storage.
- File Storage Service: FSS is a managed file storage service that can be accessed concurrently by thousands of compute instances using the NFSv3 protocol and file system interface.
- Local NVMe: Provides SSDs storage available for Instance while running that delivers fast random I/O and high IOPS.
To know more about various storage options in OCI check our post on Oracle Cloud Infrastructure (OCI) | Storage Object, Block | File Storage, Data Transfer Service|
Now it’s your turn to post your doubts in the comment section and let us know where you are facing challenges in Oracle Cloud Infrastructure
This post is from our Course “[1Z0-1072] Oracle Cloud Infrastructure Architect Associate” with 1 Year On-Job Support and 1-year Unlimited FREE Retakes (If you need to know more about this program then reach out to our team at contact@k21academy.com )
Begin Your Cloud Journey
Begin your journey towards becoming an Oracle Cloud Expert and earn a lot more in 2024 by joining our FREE CLASS. You will also know more about the Roles and Responsibilities, Job opportunities for OCI Architects, Admins in the market, and what to study Including Hands-On labs you must perform to get the Higher Paying jobs.
Click on the below image to Register for Our FREE Class on MASTERING ORACLE CLOUD FOR DBAs, APPs DBAs, ARCHITECTS & SYS ADMINS
Atul Kumar says
Q: [On Social Media] Then whats difference between on premise server and c@c?
A: On-premise you buy server whereas in C@C you subscribe to the server so no upfront cost moreover there is no cloud Software so you won’t be able to do things like ChargeBack to dept or setting quotas or no PaaS tools like DBaaSCLI or DbaaSMonoitor etc when don’t have C@C (and Just On-Premise)
Thiru says
I have a VM running on OCI Classic. Now I want to migrate this to OCI. Are there any documents available?
Atul Kumar says
There is not direct path to migrate from OCI-C to OCI yet , just extract data on to Object Storage from OCI-C and import into OCI
Romeo Ybanez says
In your program for Oracle Certified Cloud Architect can I be certified by Oracle? Because I understand to be Oracle Certified you have to undergo trainings in Oracle University as required specifically in each certification.
Sravan says
Hi Atul,
Can we create resources like vcn or compute in same compartment in multiple regions?
Rohit Pathak says
Hi Sravan,
Since, the compartment is global resources, you create resources (compute, VCN, Storage etc) within same compartment and in multiple region.
Thanks & Regards,
Rohit
Rohit Pathak says
Hi Sravan,
I would like to add one more point if you want to connect two VCN created within a region but in different AD, you can use local peering and if you want to connect two VCN created across the region, you will be using VCN remote peering. We cover these things in more detailed in our Oracle Cloud Infrastructure Training. I would suggest you check our free masterclass for Oracle Cloud Infrastructure by registering using the below link.
https://k21academy.com/oci02
Thanks & Regards,
Rohit
KRISHAN KUMAR says
New Region (Zurich, Switzerland) with 1 AD is missing here.
Surbhi Sharma says
Hi Krishnan,
Thanks for highlighting!!
We have updated the blog.
-Surbhi
Team K21
oshari says
an awesome website glad to I found it
Rahul Dangayach says
Hi Oshari,
We are glad that you liked our blog!
Please stay tuned for more blogs
Thanks & Regards
Rahul Dangayach
Team K21 Academy
Mario says
OCI is horrible. A pain the backup mechanism, the Volume Block list, the logging… Really think about this when select a Cloud Provider. Try to migrate from Oracle products to another providers.