Oracle Private Cloud Appliance - Concepts Guide - Release 3.0.2

Aug 30, 2026

Upload by Melati

Oracle Private Cloud Appliance Concepts Guide for Release 3.0.2 provides a structured overview of architecture, hardware, administration, identity and access management, tagging, virtual networking, and compute instance concepts. The guide explains how enclaves and interfaces work within defined boundaries, how layered infrastructure services are organized, and how resources are allocated for availability and high availability. It also covers administrator access, authorization policies and health monitoring, centralized logging, upgrade and backup concepts, and networking elements such as VCNs, subnets, routing, gateways, and security rules, plus core compute launch components.

LanguageEnglish

CategoryResearch & Report

FormatPDF

Pages184

Reading Time7 h 44 min

AccessFree to download

Preface

Audience

Conventions

Documentation Accessibility

1 Architecture and Design

Introduction to Oracle Private Cloud Appliance

Compatibility with Oracle Cloud Infrastructure

Enclaves and Interfaces

Layered Architecture

Hardware Redundancy and Availability

2 Hardware Overview

Base Rack Components

Network Infrastructure

Reference and Logical Topologies

Oracle Exadata Integration

Storage

3 Appliance Administration Overview

Administrator Access

Authorization Groups and Policies

Status and Health Monitoring

Upgrade, Patching, and Backup/Restore

Disaster Recovery and Serviceability

4 Users and Groups / Identity

User Credentials and Passwords

API Signing Keys

Federation with Identity Providers

Compartments and Access Control

5 Tagging Overview

Tag Types and Defined Tags

Tag Management

Tag-Based Access Control

6 Virtual Networking Overview

VCNs, Subnets, and Route Tables

DHCP Options and Name Resolution

Gateways and Security Rules

Network Scenarios

7 Compute Instance Concepts

Components for Launching Instances

Compute Shapes

Storage for Compute Instances

Oracle Private Cloud Appliance Concepts Guide for Release 3.0.2 F59007-04 July 2023 Oracle Private Cloud Appliance Concepts Guide for Release 3.0.2, F59007-04 Copyright © 2022, 2023, Oracle and/or its affiliates. Contents Preface Audience x Feedback x Conventions x Documentation Accessibility xi Access to Oracle Support for Accessibility xi Diversity and Inclusion xi 1 Architecture and Design Introduction to Oracle Private Cloud Appliance 1-1 Compatibility with Oracle Cloud Infrastructure 1-1 Enclaves and Interfaces 1-3 Enclave Boundaries 1-3 Access Profiles 1-4 Layered Architecture 1-5 Hardware Layer 1-5 Platform Layer 1-5 Infrastructure Services Layer 1-6 Platform Layer Overview 1-6 Fundamental Services 1-6 Hardware Management 1-7 Service Deployment 1-7 Common Service Components 1-7 Physical Resource Allocation 1-9 High Availability 1-10 Hardware Redundancy 1-10 System Availability 1-10 Compute Instance Availability 1-11 Continuity of Service 1-12 2 Hardware Overview Base Rack Components 2-1 Servers 2-3 Management Nodes 2-3 Compute Nodes 2-3 Server Components 2-4 Network Infrastructure 2-4 Device Management Network 2-5 Data Network 2-5 Uplinks 2-5 Physical Connection 2-5 Reference Topologies 2-6 Logical Connection 2-8 Uplink Protocols 2-9 Administration Network 2-11 Reserved Network Resources 2-11 Oracle Exadata Integration 2-12 Storage 2-13 Oracle ZFS Storage Appliance ZS9-2 2-13 Additional Storage 2-13 3 Appliance Administration Overview Administrator Access 3-1 Authorization Groups and Their Policies 3-1 Authorization Families 3-3 Status and Health Monitoring 3-4 Monitoring 3-4 Fault Domain Observability 3-5 System Health Checks 3-6 Centralized Logging 3-7 Upgrade 3-7 Pre-Checks 3-8 Single Component Upgrade 3-8 Full Management Node Cluster Upgrade 3-10 Patching 3-10 Backup and Restore 3-11 Disaster Recovery 3-12 Serviceability 3-13 iv Users and Groups 4-1 User Credentials 4-2 Account Passwords 4-2 API Signing Keys 4-2 Federating with Identity Providers 4-3 Supported Identity Providers 4-3 Experience for Federated Users 4-3 Federation Process Overview 4-3 Organizing Resources in Compartments 4-4 Understanding Compartments 4-4 Considerations for Granting Resource Access 4-5 Examples of Compartment Organization 4-5 All Resources in the Root Compartment 4-5 Separately Managed Project Compartments 4-6 Working with Compartments 4-6 Creating Compartments 4-6 Compartment Access Control 4-6 Adding Resources to Compartments 4-7 Moving Resources Between Compartments 4-7 Deleting Compartments 4-7 Moving a Compartment to a Different Parent Compartment 4-8 Policy Implications 4-8 Tagging Implications 4-8 How Policies Work 4-9 Policy Basics 4-9 Resource Types 4-9 Policy Attachment 4-10 Policy Syntax 4-10 Subject 4-10 Verb 4-11 Resource Type 4-11 Location 4-12 Conditions 4-13 Common Policies 4-14 Let the help desk manage users 4-14 Let auditors inspect your resources 4-14 Let network admins manage a cloud network 4-14 Let users launch compute instances 4-15 Let users manage compute instance configurations, instance pools, and cluster networks 4-15 v Let volume admins manage block volumes, backups, and volume groups 4-15 Let volume backup admins manage only backups 4-16 Let boot volume backup admins manage only backups 4-16 Let users create a volume group 4-17 Let users clone a volume group 4-17 Let users create a volume group backup 4-17 Let users restore a volume group backup 4-18 Let users create, manage, and delete file systems 4-18 Let users create file systems 4-18 Let object storage admins manage buckets and objects 4-18 Let users write objects to object storage buckets 4-19 Let users download objects from object storage buckets 4-19 Let users manage their own credentials 4-19 Let a

FAQs

What virtual networking components are covered and how is traffic secured?

The document explains VCNs, subnets, route tables, IP addressing, name resolution, and gateways such as NAT and dynamic routing. It also covers security rules, stateful vs. stateless rules, security lists, and network security groups.

Aug 30, 2026

Upload by Melati