The best practice is to create a private endpoint for the ATP database. Typically, most clients prefer using a private endpoint. When there is a requirement to connect VBCS or perform third-party integrations with the ATP database, we traditionally use a public load balancer and keep the ATP database’s private IP as the backend. I have been following this approach for years.
Use Case: Why Use Both
Private Endpoint and Public Access?
By default, ATP databases with a private endpoint are
accessible only from resources inside the VCN. While this ensures security, it
can create operational constraints for:
• VBCS application
• CI/CD tools that run outside OCI.
• Integration tools like Oracle Data Integration (ODI), Oracle Integration
Cloud (OIC), or external monitoring systems.
• SQL Developer or SQLcl usage for occasional ad-hoc queries from public IPs.
To address
this, Oracle allows public access even when
the ATP database is deployed with a private endpoint provided access is
governed by Access Control Lists (ACLs) and Wallet-based Authentication.
How Secure Is This Setup?
When public access is enabled in a private endpoint ATP database, Oracle ensures that the security model remains intact through:
• Access
Control List (ACL): You define which IP addresses or CIDR ranges can access
the service.
• Mutual TLS (mTLS): Requires clients to authenticate using the wallet
file (which includes client credentials).
• Database Vault / Data Safe Integration: Further enhances control over
who can access what data.
• No direct SQL*Net access from public internet: Access is via secure
tools like SQL Developer, REST API, APEX, or DB Tools.
Steps to enable Public Access
in Private Endpoint ATP Database
a. Choose the Private Endpoint > VCN > Private Subnet
b. Enable the mutual TLS (mTLS)
c. By default, public access is disabled when the ATP is
provisioned.
d. Click on More Action > Update network access
e. To enable public access, toggle the switch
f. Specify the IP address, VCN CIDR range, or OCID from
which the database will be accessed and click on update.
g. Public access to the ATP database is enabled, and the
public endpoint URL becomes available.
h. Download the new wallet file, which will contain entries
for both the private and public endpoints.
Accessing the Database
You can also
access Database SQL, REST, and ORDS from the Database Actions tab.
Additionally,
the following services can be accessed through the public endpoint of the ATP
database.
APEX Workspace:
Data Studio:
Performance
HUB:
Database
Dashboard:
Final Thoughts
Using ATP with Private Endpoint and Controlled Public Access gives you the best
of both :
• Isolation and network-level security using the VCN.
• Flexibility through tool-specific public access governed by ACL and mTLS.
This approach supports modern, hybrid cloud architectures where agility,
security, and compliance must go hand in hand.
Read More:
7 comments:
24/7 Mobile Tyre Service Melbourne is a reliable solution for drivers needing urgent tyre support across the city, offering fast and professional services such as mobile tyre replacement, puncture repair, and emergency flat tyre assistance. Whether you’re stuck in the Melbourne CBD or searching for “mobile tyre repair near me,” their team is equipped to handle all tyre emergencies around the clock. With a focus on convenience and safety, they bring the workshop to your location, saving you time and stress while ensuring your vehicle is back on the road quickly. From standard tyre changes to complex repairs, 24/7 Mobile Tyre Service Melbourne is the trusted choice for dependable mobile tyre care whenever you need it.
https://247mobiletyreservicemelbourne.com.au/
Prodental Clinic in Baulkham Hills is a trusted dental practice offering comprehensive care for families and individuals, with services ranging from routine check-ups and preventive treatments to advanced procedures like crowns and bridges. Known for its modern facilities and patient-focused approach, the clinic is often recommended as one of the best dentists in Baulkham Hills, providing transparent crown and bridge cost estimates and tailored treatment plans. Whether you’re searching for a reliable dental clinic, the best dentist near you, or specialized restorative care, Prodental Clinic stands out as a leading choice for quality dental services in the Baulkham Hills area.
Solid Solar Services is a trusted provider of solar panel installation, offering reliable and cost-effective renewable energy solutions for homes and businesses. With a focus on quality workmanship and advanced solar technology, the company ensures that every installation maximizes energy efficiency and long-term savings. Their team of experts guides clients through the entire process—from consultation and system design to installation and maintenance—making the switch to solar seamless and sustainable. Solid Solar Services is committed to helping communities reduce energy costs and embrace clean, eco-friendly power for a brighter future.
Kandid Loans is a professional mortgage brokerage serving the Baulkham Hills community, dedicated to helping clients secure the right home loan solutions with ease and confidence. With access to a wide range of lenders and products, their team provides tailored advice to match individual financial goals, whether it’s buying a first home, refinancing, or investing in property. Known for transparent guidance and a client-first approach, Kandid Loans simplifies the mortgage process by handling the complexities of loan applications and negotiations, ensuring that residents of Baulkham Hills receive competitive rates and personalized support throughout their homeownership journey.
https://kandidloans.com.au/mortgage-broker-sydney/
Adelaide Aqua Boys is a trusted local service specializing in professional pool maintenance across Adelaide, ensuring clean, safe, and sparkling pools all year round. Their expert team provides comprehensive care, including regular cleaning, water testing, chemical balancing, equipment checks, and repairs, tailored to both residential and commercial pools. Known for reliability and attention to detail, Adelaide Aqua Boys take the hassle out of pool upkeep, allowing clients to enjoy a stress-free swimming experience. With a commitment to quality service and customer satisfaction, they have become a go-to choice for pool maintenance in Adelaide.
Balgowlah Village Medical Practice is a trusted local healthcare centre dedicated to providing compassionate, comprehensive medical services for individuals and families in the community. With a team of experienced doctors and caring staff, the practice focuses on delivering personalised care across general medicine, preventative health, and chronic disease management. Their patient-first approach ensures that every visit is comfortable and efficient, while modern facilities and a commitment to ongoing medical excellence make them a reliable choice for long-term health and wellbeing.
Boujee By Ashtons is a creative event styling and kids party planning service in Melbourne, specializing in prop hire, soft play hire, and themed party setups that bring celebrations to life. Whether you’re searching for elegant props to elevate your event, safe and fun soft play equipment for children, or a full-service kids party planner, Boujee By Ashtons delivers tailored solutions with style and attention to detail. Their team ensures every occasion—birthday parties, family gatherings, or special events—feels unique, memorable, and stress-free, making them a go-to choice for prop hire and soft play party hire across Melbourne.
Post a Comment