Adding a Service CIDR Label to a Service Gateway

Add a specified service CIDR label to the service gateway.

Important

Because Object Storage is covered by both OCI <region> Object Storage and All <region> Services in Oracle Services Network, a service gateway can use only one of those service CIDR labels. Likewise, a route table can have a single rule for one of the service CIDR labels. It can't have two separate rules, one for each label.

If the service gateway is configured to use All <region> Services in Oracle Services Network, the route rule can use either CIDR label. However, if the service gateway is configured to use OCI <region> Object Storage and the route rule uses All <region> Services in Oracle Services Network, traffic to services in the Oracle Services Network except Object Storage gets dropped or blackholed. The Console prohibits you from configuring the service gateway and corresponding route table in that manner.

To switch the service gateway to use a different service CIDR label, see When You Switch to a Different Service CIDR Label.

1. On the Virtual Cloud Networks list page, select the VCN that contains the gateway that you want to work with. If you need help finding the list page or the VCN, see Listing VCNs.
2. On the details page, perform one of the following actions depending on the option that you see:
  
  On the Gateways tab, go to the Service Gateways section.
  
  Under Resources, select Service Gateways.
3. For the service gateway that you're interested in, select the Actions menu , and then select Edit.
4. (Optional) You can rename the service gateway if you decide to.
5. In the Services field, select the appropriate service CIDR label. Without a service CIDR label enabled for the gateway, no traffic flows through it.
6. Select Save changes.
What's Next
Update route tables for any subnets that need to access the service gateway. See instructions in Task 2: Update routing for the subnet.

Update relevant security rules. See instructions in Task 3: (Optional) Update security rules.
Use the network service-gateway attach command and required parameters to add a service CIDR label to a service gateway:
oci network service-gateway attach --service-gateway-id sgw-ocid --service-id service-ocid ... [OPTIONS]
For a complete list of parameters and values for CLI commands, see the CLI Command Reference.
:
Run the AttachServiceId operation to add a service CIDR label to a service gateway.
Use ListServices to determine the available service CIDR labels. GetService: Gets the details for a particular service CIDR label.

Oracle Cloud Infrastructure Documentation

Adding a Service CIDR Label to a Service Gateway