Overview of Compute Cloud@Customer

Key Features

Flexible Connectivity

Compute Cloud@Customer can be configured in different connectivity modes:

• Connected – Compute Cloud@Customer in your data center is securely connected to your OCI home region.

  This enables you to manage all your IAM resources in one location in your OCI home region. IAM resources are automatically synchronized to Compute Cloud@Customer in your data center.

  The cloud operations team uses best-in-class operational processes to install, secure, and monitor the underlying cloud infrastructure.

  For more information, see Compute Cloud@Customer - Connected.

• Isolated – Oracle Compute Cloud@Customer in your data center is fully air-gapped, and isn't connected to OCI.

  IAM resources are managed locally on the Compute Cloud@Customer infrastructure.

  You can choose who manages the infrastructure; your organization, partners, or Oracle CSS through managed services.

  For more information, see Compute Cloud@Customer - Isolated.

Consistent Management

• Employs the same OCI services, APIs, and automation as the rest of Oracle’s distributed cloud for developing workloads.

• Applications and services continue to run even when disconnected from the OCI control plane host region.

• Oracle Operator Access Control gives you oversight and control over the actions of Oracle operators, helping increase security.

Scalable Compute

• 552 cores of compute capacity with 6.7 TB of available memory can be incrementally expanded to 6,624 cores and 80.4 TB of memory for supporting large and growing workloads.

• High performance VM shapes with up to 96 cores each to run compute-intensive applications.

• Oracle Linux licensing and support, which is included with a subscription, eliminates hidden costs.

• Support for multiple guest operating systems, including Oracle Linux, Oracle Solaris, third-party Linux distributions, and Microsoft Windows Server, lets you use a single platform for all workloads.

GPU Expansion

• Add GPU nodes with four NVIDIA L40S GPUs.

• Run compute-intensive, scalable workloads securely on-premises to address both performance and data residency requirements.

• Deploy generative AI inferencing, HPC, and graphics processing in your data center.

Flexible Storage

• Independent scaling of storage and compute makes it easy to optimize performance and costs for diverse workloads.

• OCI object, block, and file storage services with any mix of consumption support all types of workloads.

• 150 TB of storage capacity that’s incrementally expandable to 3.4 PB helps meet the needs of data intensive workloads.

Built-in Networking

• Dedicated 400 Gb/sec internal network bandwidth increases performance for all applications.

• OCI Network Load Balancer efficiently distributes network traffic across servers.

• OCI virtual cloud networks, subnets, security lists, route tables, and other networking capabilities are included to simplify deployment.

• Up to 800 Gb/sec of data center connectivity speeds access to data center resources.

• Up to 800 Gb/sec of dedicated, direct connect bandwidth to Exadata Cloud@Customer minimizes database access latency.

Container Automation

• Deploy OCI Kubernetes Engine (OKE), a managed Kubernetes service that simplifies the operations of enterprise-grade Kubernetes at scale, to provide reliable operations for both the control plane and the worker nodes with automatic scaling, patching, and security updates.

• OKE on Compute Cloud@Customer brings basic cluster capabilities on-premises, delivering modernization, consolidation, and lower total cost of ownership.

Cloud Resources

When you sign in to Compute Cloud@Customer, you can create and manage the same types of resources that you can create in Oracle Cloud Infrastructure:

• Instances: You can select the most appropriate type of instance for your applications based on characteristics such as the number of CPUs, amount of memory, and network resources. You can deploy the instance with any of the provided platform images, or bring your own image. See Compute Instances and Images for Compute Cloud@Customer Instances.
• Virtual Cloud Networks (VCNs): A virtual version of a traditional network, including subnets, route tables, and gateways, on which your instance runs. At least one cloud network must be set up before you create instances. For information about setting up cloud networks see Virtual Cloud Networks.
• Block Volumes: Lets you dynamically provision and manage block volumes that you can attach to one or more compute instances. See Block Volume Storage.
• File Storage: A durable, scalable, secure, enterprise-grade network file system that you can connect to from any compute instance in your virtual cloud network (VCN). See File Storage.
• Object Storage: A high-performance storage platform that lets you store unstructured data of any content type. This storage is regional and not tied to any specific compute instance. See Object Storage
• Kubernetes Engine (OKE): A scalable, highly available service that can be used to deploy any containerized application on Compute Cloud@Customer. See Kubernetes Engine (OKE) on Compute Cloud@Customer.

User Interfaces

To manage resources such as VCNs, instances, and storage, on Compute Cloud@Customer, use the following interfaces:

• OCI API (Compute Cloud@Customer supports a subset of operations)
• OCI CLI (Compute Cloud@Customer supports a subset of operations)
• Compute Cloud@Customer Console – a browser UI that offers a similar user experience to the Oracle Cloud Console.

For information about accessing your resources, see Signing in to Compute Cloud@Customer.

You use the Oracle Cloud Infrastructure Console, CLI, and APIs to manage the following items:

• (Connected mode only) Initial connection of the Compute Cloud@Customer infrastructure to your tenancy in Oracle Cloud Infrastructure.
• (Connected mode only) Schedules for when Oracle can upgrade Compute Cloud@Customer.
• (Connected mode only) Identity and Access Management (IAM), including users, groups, policies, compartments, and tags.
• (Connected mode only) Oracle's access to Compute Cloud@Customer using Oracle Operator Access Control.
• Billing and payment information.

Upgrades

System upgrades are designed for minimum disruption and maximum availability. Health checks are performed before an upgrade to ensure that all components are in an acceptable state. The upgrade process is modular and only upgrades components – such as firmware, OSs, containerized services, or the system's main database - as needed. Oracle performs all upgrades, but you can determine the upgrade time frame.

Compute Cloud@Customer - Connected

The infrastructure is fully managed and supported by Oracle. Oracle installs and initializes the Compute Cloud@Customer infrastructure in your data center. Oracle continues to monitor and maintain the infrastructure over the lifespan of the service.

Authentication

Compute Cloud@Customer uses the same federated identity provider that you use for Oracle Cloud Infrastructure to manage Console sign ins. See Federated Identity Providers.

IAM Resources

Your Oracle Cloud Infrastructure IAM resources are regularly and securely cached in the Compute Cloud@Customer infrastructure. This enables you to manage IAM resources in one location. If you change IAM resources in the OCI tenancy, the changes are automatically applied to resources in Compute Cloud@Customer. See IAM Overview.

The following diagram shows how Compute Cloud@Customer infrastructure is securely connected to your tenancy in an Oracle Cloud Infrastructure region.

Compute Cloud@Customer - Isolated

Unlike the connected mode, Compute Cloud@Customer Isolated is a fully air-gapped, on-premises cloud solution. Yet it delivers the same comprehensive compute, GPU, storage, and networking capabilities as a connected Compute Cloud@Customer.

Compute Cloud@Customer Isolated is designed for organizations with strict data sovereignty and regulatory requirements. It enables rapid, single-rack deployments that can scale as needed, supporting advanced AI and digital innovation while ensuring full control over data and infrastructure within your premises.

Compute Cloud@Customer Isolated is well suited for entities such as government agencies, ministries of defense, intelligence organizations, telecommunications, and healthcare providers, it helps minimize risk of cyberattacks, complies with strict regulations, and supports critical national security requirements.

In addition to the overall Compute Cloud@Customer key features, Compute Cloud@Customer Isolated provides the following benefits:

• Operates with or without internet connectivity.
• Satisfies data sovereignty, residency, security, and latency requirements.
• The system is fully self-managed and not linked to Oracle Cloud Infrastructure (OCI).
• All configuration and management, including OCI Identity and Access Management (IAM), is managed locally on the infrastructure.
• The infrastructure can be managed and serviced by customers, partners or Oracle CSS through managed services.
• Includes utilities that provide assess to upgrade bundles and logs, and time-limited access to underlying management administration, each of which enable you to self-manage the isolated infrastructure.

The following diagram shows Compute Cloud@ Customer in isolated mode.

Additional Overviews

See the following sections:

• Network Infrastructure
• Compute and Storage Configurations
• Guest Operating System Matrix
• High Availability
• Using Your Own CA Trust Chain
• Oracle Operator Access Control
• GPU Expansion
• Service Limits for Compute Cloud@Customer
• Quotas for Compute Cloud@Customer