OCI Network Security Groups and Security Rules

NSG allows access control to a group of resources that have the same security posture. NSG consists of two items a security list and VNIC.
Stateful Vs Stateless security rules: For high volume traffic it is recommended to you stateless security rules. This is because stateful security list tracks connection information to allow by directional traffic (response traffic to be sent). This state is stored in the compute instance and the network table might get full for high volume traffic.

Comments

Post a Comment

Popular posts from this blog

Well Architected Framework

  Operational Excellence Security Reliability Performance Efficiency Cost Optimization Sustainability Operation   Perform operations as code:   Make frequent, small, reversible changes Refine operations procedures frequently: Anticipate failure: Learn from failure Security  Implement a strong identity foundation:  Implement the principle of least privilege and enforce separation of duties with appropriate authorization for each interaction with your AWS resources. Centralize identity management, and aim to eliminate reliance on long-term static credentials. Enable traceability:  Monitor, alert, and audit actions and changes to your environment in real time. Integrate log and metric collection with systems to automatically investigate and take action. Apply security at all layers:  Apply a defense in depth approach with multiple security controls. Apply to all layers (for example, edge of network, VPC, load balancing, every instance and compute service,...
Read more

AWS Links

 Aurora https://docs.aws.amazon.com/ AmazonRDS/latest/ AuroraUserGuide/Aurora. Overview.Endpoints.html https://docs.aws.amazon.com/ AmazonRDS/latest/ AuroraUserGuide/Concepts. AuroraHighAvailability.html         https://docs.aws.amazon.com/ lambda/latest/dg/invocation- eventsourcemapping.html   https://aws.amazon.com/blogs/ compute/announcing-improved- vpc-networking-for-aws-lambda- functions/ https://docs.aws.amazon.com/ lambda/latest/dg/ gettingstarted-concepts.html https://docs.aws.amazon.com/ lambda/latest/dg/invocation- scaling.html https://docs.aws.amazon.com/ lambda/latest/dg/ configuration-concurrency.html https://docs.aws.amazon.com/ lambda/latest/dg/provisioned- concurrency.html Reserved concurrency for function put upper limit on number of requests(use to limit overloading downstream system), can use autoscaling for provisioned concurrency https://aws.amazon.com/blogs/ compute/understanding-aws- lambda-scaling-and-throughput/ In asynchronous operation, the ...
Read more