ZPR Supports Traffic Between Peered VCNs

Zero Trust Packet Routing (ZPR) policy syntax has been expanded to support secure communication across VCNs in the same region and tenancy using security attributes applied to OCI resources. Before, traffic between peered VCNs could only be achieved by referencing a specific IP address or range of IP addresses. Now you can reference the security attributes applied to resources in ZPR policy. Key benefits of doing so include the following:

  • Eliminate complex manual configurations for secure VCN-to-VCN communication.
  • Maintain consistent security policies across your entire cloud infrastructure.
  • Securely connect OCI resources across VCNs with zero-trust principles.

See ZPR policy syntax for information about the updated syntax. You can also view policy examples.

To troubleshoot network connectivity issues with ZPR and peered connections, you can use the Network Path Analyzer to identify incorrectly applied security attributes or policies that don't allow the connection. To do so, you must first set a resource as a source or destination.