Mirror of Oracle documentation
Converted for search and offline reading. Authoritative source: Oracle. Diagrams and some complex tables are simplified — check the PDF when in doubt.
1
Introduction
The Oracle Retail AI Foundation Cloud Service (AIFCS) database is accessible through Innovation Workbench including APEX and Notebook development environments. Private endpoints extend access to AIFCS within the Virtual Cloud Network (VCN) on Oracle Cloud Infrastructure or to other networks peered to the VCN, such as your corporate network. You can access AIFCS data from hosts within the VCN or from the on-premises network.
Prerequisites
To implement Private Endpoint access to Oracle Retail AI Foundation Cloud service, your organization must have:
-
A paid Oracle Cloud Infrastructure (OCI) tenancy with appropriate service limits.
-
An OCI Virtual Cloud Network (VCN) with at least one subnet in the same region as the AIFCS deployment.
-
Networking expertise or access to experienced resources familiar with OCI networking, including VPN or FastConnect setup and DNS configuration.
What is a Private Endpoint?
With a private endpoint, traffic does not go over the internet. A private endpoint is a private IP address within your VCN that you can use to access a given service within Oracle Cloud Infrastructure. The service sets up the private endpoint in a subnet of your choice within the VCN. You can think of the private endpoint as just another Virtual Network Interface Card (VNIC) in your VCN. You control access to it as you would for any other VNIC by using security rules. When you set up a private endpoint for AIFCS, however, the VNIC is set up for you, and its availability is maintained on your behalf. Your only responsibility is to maintain the subnet and the security rules.
Forward and Reverse Access
As shown in Figure 1-1, private endpoints and reverse connections enable secure, non-internet communication between your network and AIFCS.
ee
Private Endpoint Setup Timeline
When you request a private endpoint for AIFCS, you receive an endpoint for each of your environments: production, stage, and so on. You also receive a second private endpoint that gives you access to a Credential Exchange Service (see Access Setup for the Credential Exchange Service). Establishing a private endpoint requires some lead time and a short outage on each environment (two to eight hours, depending on environment size). The outage on each environment precedes the availability of the endpoint by several days. In short, the time between your request for private endpoint access and its availability is measured in days, not hours or minutes. Oracle support will contact you to schedule environment outages.