At times you may need to provide access from Exadata Cloud Service to your corporate network. For example, a data loading or migration function running on your Exadata Cloud Service compute nodes may need to pull data from an application or service residing in your corporate network.
If you are not using an IPSec VPN or FastConnect Classic, then you can enable access to your corporate network from Exadata Cloud Service by exposing your corporate network services through a publicly routable IP address. This can be done in your corporate network environment by using a reverse proxy or specific Network Address Translation (NAT) configuration. If you pursue such a configuration:
Ensure that your corporate network allows publishing of network resources through a publicly routable IP address.
Ensure that the network traffic is appropriately protected at the application level by using strong encryption and integrity algorithms.
While considering the security requirements and constraints of your corporate systems and network, ensure that you mitigate any risks associated with publishing the network resource through a publicly routable IP address.
If you are using an IPSec VPN or FastConnect Classic, then you can enable access to your corporate network from Exadata Cloud Service by appropriately configuring the IPSec VPN or FastConnect Classic connection. In this case, ensure that specify your requirements during the network provisioning process.