Access an ATP Database Configured as a Private Endpoint

If you want to use an ATP database that is protected using a private endpoint (ATP-PE), you can configure the database instance to allow a public Visual Builder instance to connect to the database directly, without requiring a public load balancer.

Similarly, if you are already using an ATP database configured to use a public endpoint, and you want to switch to ATP-PE, you need to update the allowlists in the ATP-PE settings and the VB instance settings to allow connections to the database. For more on adding a VB instance to allowlists, see Allow Your Instance to Access Services.

To connect your public VB instance to an ATP-PE instance:

  1. On the Visual Builder Instances page, find the instance you want to work with and open its details page.
  2. Collect the required details about your Visual Builder instance.

    To configure the access list in ATP-PE, you'll need to provide Visual Builder network gateway details:

    • If VB and ATP-PE are in the same OCI region, you need theVB service VCN OCID and the VB management VCN OCID.
    • If VB and ATP-PE are in different OCI regions, you need the service outbound IP and the management outbound IP

    You can view an instance's VB service NAT gateway IP and VCN OCID in the instance's Visual Builder Instance Information tab in the OCI console. If the instance also has a VB management NAT gateway IP and VCN OCID, they will also be displayed in the tab:


    Description of admin-instacedetails-ocid.png follows
    Description of the illustration admin-instacedetails-ocid.png

  3. Configure the ATP-PE instance's access control rule.
    1. Open the ATP-PE instance's details page.
    2. Select More actions, then select Update network access.
    3. In the Update network access panel, select Allow public access in the Private endpoint access pane.
    4. Enter the required VB VCN OCIDs or IP addresses. Click Add access control rule.

      For example, if the VB and ATP-PE instances are in the same OCI region, you should select Virtual cloud network OCID in the two IP notation type drop-down lists, and enter the two required VCN OCIDs in the Values fields:


      Description of allow-access-atp-pe-db.png follows
      Description of the illustration allow-access-atp-pe-db.png

      For details on the ATP access control settings, see Use a Private Endpoint with Public Access Allowed and Configure Private Endpoint Advanced Options in the Oracle Autonomous Database documentation.

  4. Download the ATP wallet.

    If you are switching from an ATP database to ATP-PE, you will need to download the updated ATP wallet.

  5. File a Service Request to update the ATP connection string and wallet in the backend.