{"id":890,"date":"2026-04-16T14:05:17","date_gmt":"2026-04-16T14:05:17","guid":{"rendered":"https:\/\/www.devopsschool.com\/tutorials\/oracle-cloud-exadata-database-service-on-exascale-infrastructure-tutorial-architecture-pricing-use-cases-and-hands-on-guide-for-data-management\/"},"modified":"2026-04-16T14:05:17","modified_gmt":"2026-04-16T14:05:17","slug":"oracle-cloud-exadata-database-service-on-exascale-infrastructure-tutorial-architecture-pricing-use-cases-and-hands-on-guide-for-data-management","status":"publish","type":"post","link":"https:\/\/www.devopsschool.com\/tutorials\/oracle-cloud-exadata-database-service-on-exascale-infrastructure-tutorial-architecture-pricing-use-cases-and-hands-on-guide-for-data-management\/","title":{"rendered":"Oracle Cloud Exadata Database Service on Exascale Infrastructure Tutorial: Architecture, Pricing, Use Cases, and Hands-On Guide for Data Management"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">Category<\/h2>\n\n\n\n<p>Data Management<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">1. Introduction<\/h2>\n\n\n\n<p><strong>What this service is<\/strong><br\/>\n<strong>Exadata Database Service on Exascale Infrastructure<\/strong> is an Oracle Cloud (OCI) managed database service that lets you run customer-managed Oracle Databases on Exadata, using an elastic consumption model for Exadata compute and storage.<\/p>\n\n\n\n<p><strong>Simple explanation (one paragraph)<\/strong><br\/>\nIf you need Oracle Database with Exadata performance but want to scale resources up and down more flexibly than fixed hardware deployments, Exadata Database Service on Exascale Infrastructure provides a cloud-managed Exadata platform where you create VM clusters and databases, connect privately from your network, and pay based on the resources you allocate and consume (pricing varies by region, license model, and SKU\u2014verify in official pricing).<\/p>\n\n\n\n<p><strong>Technical explanation (one paragraph)<\/strong><br\/>\nIn OCI, Exadata Database Service is a managed service where Oracle operates and maintains the underlying Exadata infrastructure and much of the platform lifecycle, while you control database configuration, schemas, users, data, backup strategy, and most database administration tasks. \u201cExascale Infrastructure\u201d indicates a more elastic, consumption-oriented infrastructure layer compared with dedicated Exadata infrastructure. You typically provision: an Exascale infrastructure resource, then an Exadata VM cluster on top, then database homes and Oracle databases (Single Instance or RAC, depending on what OCI supports for your chosen shape\/version\u2014verify in official docs).<\/p>\n\n\n\n<p><strong>What problem it solves<\/strong><br\/>\nIt solves the common enterprise problem of running high-throughput Oracle Database workloads (OLTP, analytics, mixed workloads) with predictable performance and mature Oracle tooling, while reducing the operational burden of managing physical Exadata hardware and enabling more granular scaling and cost control than traditional fixed-capacity deployments.<\/p>\n\n\n\n<blockquote>\n<p>Naming note (important): OCI offers multiple Exadata-related services (for example, Exadata Database Service on Dedicated Infrastructure and Exadata Cloud@Customer). This tutorial focuses only on <strong>Exadata Database Service on Exascale Infrastructure<\/strong>. If Oracle renames or restructures SKUs over time, <strong>verify the current name and scope in the official OCI Exadata documentation<\/strong>.<\/p>\n<\/blockquote>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">2. What is Exadata Database Service on Exascale Infrastructure?<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Official purpose (what OCI intends it for)<\/h3>\n\n\n\n<p>Exadata Database Service on Exascale Infrastructure is intended to provide Oracle Database customers with Exadata capabilities in Oracle Cloud while shifting infrastructure operations to Oracle and offering elastic resource allocation aligned to workload demand.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Core capabilities (high-level)<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Run <strong>customer-managed Oracle Database<\/strong> workloads on Exadata in OCI.<\/li>\n<li>Provision and manage:<\/li>\n<li>Exascale infrastructure resource<\/li>\n<li>Exadata VM clusters<\/li>\n<li>Database homes<\/li>\n<li>Oracle databases<\/li>\n<li>Integrate with OCI networking, IAM, monitoring, and backup services.<\/li>\n<li>Support enterprise operational patterns: private networking, HA options, maintenance windows, monitoring, backups, and governance.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Major components (how you should think about it)<\/h3>\n\n\n\n<p>While exact resource names can vary by OCI console\/API and may evolve, the architecture usually includes these layers:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>\n<p><strong>Exascale infrastructure (provider-managed layer)<\/strong><br\/>\n   The Exadata platform capacity presented in an elastic model. Oracle manages the underlying hardware, networking, and service control plane.<\/p>\n<\/li>\n<li>\n<p><strong>Exadata VM cluster (tenant-managed configuration layer)<\/strong><br\/>\n   A logical cluster where database compute is allocated. You configure CPU allocation, networking, and system-level settings. VM clusters can host one or more databases (subject to OCI limits and design best practices).<\/p>\n<\/li>\n<li>\n<p><strong>Database homes and databases (tenant-managed database layer)<\/strong><br\/>\n   You create a database home (Oracle software home) and then create one or more Oracle databases in that home. You manage schemas, users, application objects, and database configuration within supported boundaries.<\/p>\n<\/li>\n<li>\n<p><strong>OCI networking and security (shared responsibility)<\/strong><br\/>\n   VCNs, subnets, NSGs, route tables, and (optionally) DRG\/VPN\/FastConnect provide private connectivity and security segmentation.<\/p>\n<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\">Service type<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Managed Oracle Database platform<\/strong> (Oracle-managed Exadata infrastructure + customer-managed database administration within supported controls).<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Scope (regional vs global)<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Regional service<\/strong> in Oracle Cloud Infrastructure. Resources are created in a specific OCI region and attached to your VCN\/subnets in that region.  <\/li>\n<li>Availability Domain (AD) and fault-domain behavior depends on region capabilities and the service design. <strong>Verify the exact HA\/AD model for Exascale in the OCI docs for your region<\/strong>.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">How it fits into the Oracle Cloud ecosystem<\/h3>\n\n\n\n<p>Exadata Database Service on Exascale Infrastructure sits in OCI\u2019s <strong>Data Management<\/strong> portfolio alongside:\n&#8211; <strong>Autonomous Database<\/strong> (Oracle-managed database lifecycle with limited admin control compared with Exadata Database Service)\n&#8211; <strong>Base Database Service<\/strong> (VM or bare metal database systems without Exadata)\n&#8211; <strong>MySQL HeatWave<\/strong> (MySQL workloads)\n&#8211; Observability and governance services (Monitoring, Logging, Events, Notifications, Cloud Guard)\n&#8211; Networking connectivity options (VPN, FastConnect, DRG) used for private database access<\/p>\n\n\n\n<p>Official documentation entry point (verify the Exascale-specific section within):<br\/>\nhttps:\/\/docs.oracle.com\/en-us\/iaas\/exadata\/<\/p>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">3. Why use Exadata Database Service on Exascale Infrastructure?<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Business reasons<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Faster time to value<\/strong> than procuring and operating physical Exadata.<\/li>\n<li><strong>Elastic consumption<\/strong> can better match costs to demand than fixed capacity (exact elasticity model and minimums vary\u2014verify).<\/li>\n<li><strong>Operational consistency<\/strong> with Oracle Database enterprise features, tooling, and established runbooks.<\/li>\n<li><strong>Cloud adoption<\/strong> path for Oracle Database workloads with strong performance expectations.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Technical reasons<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Exadata-optimized capabilities (for example, offload and storage optimizations) that are difficult to match with generic VM-only deployments.<\/li>\n<li>Suitable for <strong>mixed workloads<\/strong> (transaction + analytics) where data locality and Oracle optimizations matter.<\/li>\n<li>Ability to keep using familiar database features and patterns (RAC\/ASM\/Dataguard options depend on the service configuration\u2014verify).<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Operational reasons<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Oracle manages major parts of Exadata infrastructure lifecycle (hardware, underlying platform maintenance).<\/li>\n<li>You still retain meaningful control over database-level operations (schemas, tuning, indexing, partitioning, backup strategy).<\/li>\n<li>Integrates with OCI Identity and Access Management (IAM) and observability tooling.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Security\/compliance reasons<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Private networking patterns (no public endpoints required).<\/li>\n<li>Encryption at rest and in transit are typically supported, using Oracle-managed and\/or customer-managed keys depending on configuration (verify service support for OCI Vault and customer-managed keys).<\/li>\n<li>Integrations with audit logging and OCI governance services.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Scalability\/performance reasons<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Designed for high throughput and low latency database workloads where Exadata\u2019s architecture provides benefits.<\/li>\n<li>Elastic scaling aligns well with bursty workloads, seasonal demand, and consolidation platforms.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">When teams should choose it<\/h3>\n\n\n\n<p>Choose Exadata Database Service on Exascale Infrastructure when:\n&#8211; You need <strong>customer-managed Oracle Database<\/strong> control (more than Autonomous Database provides).\n&#8211; You need Exadata-class performance and want an elastic model.\n&#8211; You have enterprise requirements: private access, governance, predictable maintenance, and strong operational controls.\n&#8211; You want to modernize or migrate from on-prem Exadata\/Oracle deployments with minimal application change.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">When teams should not choose it<\/h3>\n\n\n\n<p>Avoid (or reconsider) if:\n&#8211; You don\u2019t need Oracle Database specifically (PostgreSQL\/MySQL may be simpler and cheaper).\n&#8211; You want Oracle to manage most database administration: consider <strong>Autonomous Database<\/strong>.\n&#8211; Your workload is small, non-critical, or cost-sensitive enough that Base Database Service or a VM-based approach is more appropriate.\n&#8211; You cannot satisfy the networking and private connectivity requirements typical for Exadata deployments.\n&#8211; You need full root-level control of underlying hardware and network appliances (not a managed service).<\/p>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">4. Where is Exadata Database Service on Exascale Infrastructure used?<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Industries<\/h3>\n\n\n\n<p>Common industries include:\n&#8211; Financial services (core banking, payments, risk)\n&#8211; Telecom (billing, customer analytics)\n&#8211; Retail\/e-commerce (inventory, orders, customer 360)\n&#8211; Healthcare\/life sciences (clinical systems, claims)\n&#8211; Government (tax, citizen services)\n&#8211; Manufacturing (ERP, supply chain)\n&#8211; SaaS providers offering Oracle-backed enterprise apps<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Team types<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Database engineering teams (Oracle DBAs)<\/li>\n<li>Platform engineering teams (shared database platforms)<\/li>\n<li>Cloud engineering\/DevOps teams supporting enterprise databases<\/li>\n<li>SRE\/operations teams managing reliability and incident response<\/li>\n<li>Security teams enforcing access controls and auditability<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Workloads<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>High-volume OLTP with strict latency requirements<\/li>\n<li>Mixed OLTP + analytics (near-real-time reporting)<\/li>\n<li>Consolidation of many Oracle schemas\/databases onto fewer platforms<\/li>\n<li>Data warehousing patterns where Oracle Database features and Exadata optimizations are beneficial<\/li>\n<li>Mission-critical ERP\/CRM backends (subject to vendor certification and architecture validation\u2014verify)<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Architectures<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Hub-and-spoke OCI networking with centralized egress\/inspection<\/li>\n<li>Private connectivity from on-prem via FastConnect\/VPN into OCI VCNs<\/li>\n<li>Multi-tier application stacks: app tier on OCI compute\/Kubernetes, data tier on Exadata<\/li>\n<li>DR patterns with standby databases (availability features depend on licensing and service support\u2014verify)<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Real-world deployment contexts<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Production<\/strong>: private subnets, strict IAM separation, defined maintenance windows, monitoring\/alerting, backup\/DR, change control.<\/li>\n<li><strong>Dev\/Test<\/strong>: smaller resource allocations, scheduled uptime, cloned databases (capabilities depend on tooling and licensing\u2014verify), automation via Terraform\/CLI where supported.<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">5. Top Use Cases and Scenarios<\/h2>\n\n\n\n<p>Below are realistic scenarios where Exadata Database Service on Exascale Infrastructure is a strong fit. Each includes the problem, why the service fits, and a short example.<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>\n<p><strong>Enterprise Oracle database consolidation<\/strong>\n   &#8211; <strong>Problem:<\/strong> Hundreds of departmental databases create sprawl, inconsistent patching, and high licensing overhead.\n   &#8211; <strong>Why this fits:<\/strong> Exadata platform consolidation with elastic scaling can reduce overprovisioning while centralizing operations.\n   &#8211; <strong>Example:<\/strong> A global company consolidates 120 Oracle databases into a smaller number of VM clusters, separating environments by compartment and network segmentation.<\/p>\n<\/li>\n<li>\n<p><strong>High-throughput OLTP for payments<\/strong>\n   &#8211; <strong>Problem:<\/strong> Payment authorization requires low latency and high concurrency with strict reliability.\n   &#8211; <strong>Why this fits:<\/strong> Exadata is designed for predictable performance under heavy OLTP concurrency.\n   &#8211; <strong>Example:<\/strong> A fintech runs card authorization tables with heavy indexing and partitioning while scaling compute during peak hours.<\/p>\n<\/li>\n<li>\n<p><strong>Mixed workload (OLTP + reporting) without separate systems<\/strong>\n   &#8211; <strong>Problem:<\/strong> Running reporting queries on the same OLTP database causes contention and performance issues.\n   &#8211; <strong>Why this fits:<\/strong> Exadata\u2019s architecture and Oracle Database capabilities (partitioning, parallelism, resource management\u2014verify) help isolate and optimize mixed workloads.\n   &#8211; <strong>Example:<\/strong> A retailer runs operational reporting against near-real-time sales tables while keeping checkout performance stable.<\/p>\n<\/li>\n<li>\n<p><strong>Migration from on-prem Exadata<\/strong>\n   &#8211; <strong>Problem:<\/strong> Data center exit requires moving Exadata workloads with minimal change and minimal performance regression.\n   &#8211; <strong>Why this fits:<\/strong> Same Oracle Database ecosystem, compatible migration paths (Data Pump, RMAN, GoldenGate\u2014tool choice depends on licensing and design).\n   &#8211; <strong>Example:<\/strong> An insurer migrates from on-prem Exadata to OCI Exascale, keeping schema design and most SQL unchanged.<\/p>\n<\/li>\n<li>\n<p><strong>Seasonal scaling for tax or retail peaks<\/strong>\n   &#8211; <strong>Problem:<\/strong> Peak season demands 3\u20135x capacity for a short window.\n   &#8211; <strong>Why this fits:<\/strong> Exascale elasticity can reduce the need to permanently buy peak capacity.\n   &#8211; <strong>Example:<\/strong> A government portal scales up database compute for tax deadlines and scales down afterward.<\/p>\n<\/li>\n<li>\n<p><strong>SaaS multi-tenant Oracle backend<\/strong>\n   &#8211; <strong>Problem:<\/strong> Multiple tenants require predictable isolation and growth without constantly migrating hardware.\n   &#8211; <strong>Why this fits:<\/strong> VM cluster and database design can support consolidation with governance and monitoring per tenant.\n   &#8211; <strong>Example:<\/strong> A B2B SaaS runs a shared Oracle database with tenant partitioning and separate schemas, with strict IAM and auditing.<\/p>\n<\/li>\n<li>\n<p><strong>Mission-critical ERP modernization<\/strong>\n   &#8211; <strong>Problem:<\/strong> ERP depends on Oracle Database features and requires stable, certified deployment patterns.\n   &#8211; <strong>Why this fits:<\/strong> Exadata Database Service aligns well with Oracle Database enterprise deployments; certify with the application vendor (verify).\n   &#8211; <strong>Example:<\/strong> A manufacturing firm moves ERP database to OCI while keeping application servers in OCI compute.<\/p>\n<\/li>\n<li>\n<p><strong>Data sovereignty with regional deployment<\/strong>\n   &#8211; <strong>Problem:<\/strong> Regulations require data to remain in-country\/region.\n   &#8211; <strong>Why this fits:<\/strong> OCI regional deployment and compartmentalized governance support data residency controls.\n   &#8211; <strong>Example:<\/strong> A bank deploys Exadata in a specific OCI region and restricts admin access to in-country groups.<\/p>\n<\/li>\n<li>\n<p><strong>High-performance batch processing<\/strong>\n   &#8211; <strong>Problem:<\/strong> Nightly ETL jobs overrun the batch window.\n   &#8211; <strong>Why this fits:<\/strong> Scale compute during batch windows, tune parallelism, and scale back afterward.\n   &#8211; <strong>Example:<\/strong> A telecom runs nightly CDR processing, increasing ECPU allocation for 6 hours nightly.<\/p>\n<\/li>\n<li>\n<p><strong>Database platform with strict audit requirements<\/strong>\n   &#8211; <strong>Problem:<\/strong> Need centralized auditability of administrative actions and change tracking.\n   &#8211; <strong>Why this fits:<\/strong> Integrates with OCI Audit and governance tools; database auditing remains available.\n   &#8211; <strong>Example:<\/strong> A public-sector organization centralizes audit logs and restricts database admin operations via IAM groups and approval workflows.<\/p>\n<\/li>\n<li>\n<p><strong>Low-latency private connectivity to OCI applications<\/strong>\n   &#8211; <strong>Problem:<\/strong> Application tier on OCI needs high-throughput private DB access.\n   &#8211; <strong>Why this fits:<\/strong> VCN-native private endpoints avoid internet exposure and reduce latency.\n   &#8211; <strong>Example:<\/strong> Microservices on OCI Kubernetes Engine (OKE) use private DB endpoints via NSGs and dedicated subnets.<\/p>\n<\/li>\n<\/ol>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">6. Core Features<\/h2>\n\n\n\n<blockquote>\n<p>Feature availability can differ by region, database version, and license model. <strong>Verify in official OCI documentation for Exadata Database Service on Exascale Infrastructure<\/strong>.<\/p>\n<\/blockquote>\n\n\n\n<h3 class=\"wp-block-heading\">1) Elastic resource allocation (Exascale model)<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>What it does:<\/strong> Lets you allocate compute and storage in a more granular, consumption-oriented way than fixed infrastructure.<\/li>\n<li><strong>Why it matters:<\/strong> Reduces overprovisioning and helps handle variable demand.<\/li>\n<li><strong>Practical benefit:<\/strong> Scale up during peaks, scale down during off-hours.<\/li>\n<li><strong>Caveat:<\/strong> Minimum allocation increments, scaling limits, and billing granularity are SKU-specific\u2014verify in pricing\/docs.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">2) Customer-managed Oracle Database<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>What it does:<\/strong> You manage Oracle database configuration and objects (schemas, indexes, users, parameters within allowed boundaries).<\/li>\n<li><strong>Why it matters:<\/strong> Enables advanced tuning, application-specific configuration, and custom maintenance planning.<\/li>\n<li><strong>Practical benefit:<\/strong> Better fit for complex legacy apps or DBA-driven operational models.<\/li>\n<li><strong>Caveat:<\/strong> Not as \u201chands-off\u201d as Autonomous Database.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">3) VM cluster abstraction<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>What it does:<\/strong> Provides a managed cluster layer to host databases.<\/li>\n<li><strong>Why it matters:<\/strong> Separates platform lifecycle from database lifecycle and enables consolidation.<\/li>\n<li><strong>Practical benefit:<\/strong> Multiple databases can share the same VM cluster (subject to best practices and limits).<\/li>\n<li><strong>Caveat:<\/strong> Mis-sized clusters can create noisy-neighbor conditions if resource management isn\u2019t implemented.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">4) Database homes<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>What it does:<\/strong> Separates Oracle software installations from database instances.<\/li>\n<li><strong>Why it matters:<\/strong> Supports patching\/upgrade strategies and standardization.<\/li>\n<li><strong>Practical benefit:<\/strong> Easier to manage multiple databases with consistent versions.<\/li>\n<li><strong>Caveat:<\/strong> Home-level patching planning is still your operational responsibility within OCI\u2019s maintenance model.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">5) Private networking in OCI VCN<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>What it does:<\/strong> Deploys into your VCN\/subnets, typically with private IPs for database access.<\/li>\n<li><strong>Why it matters:<\/strong> Strong security posture and enterprise network control.<\/li>\n<li><strong>Practical benefit:<\/strong> Integrate with on-prem networks via DRG and FastConnect\/VPN.<\/li>\n<li><strong>Caveat:<\/strong> You must design routes, DNS, and security rules correctly to avoid connectivity issues.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">6) OCI IAM integration (least privilege)<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>What it does:<\/strong> Controls who can create\/modify VM clusters, databases, and related resources.<\/li>\n<li><strong>Why it matters:<\/strong> Segregation of duties (DBA vs network vs security vs platform ops).<\/li>\n<li><strong>Practical benefit:<\/strong> Use compartments and policies to isolate environments.<\/li>\n<li><strong>Caveat:<\/strong> Fine-grained permissions require careful policy design; confirm resource-type names.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">7) Monitoring and metrics via OCI Monitoring<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>What it does:<\/strong> Publishes service metrics and supports alarms.<\/li>\n<li><strong>Why it matters:<\/strong> Required for SRE operations: alerting, capacity planning, incident response.<\/li>\n<li><strong>Practical benefit:<\/strong> Alert on CPU, storage, DB availability signals (exact metrics vary\u2014verify).<\/li>\n<li><strong>Caveat:<\/strong> You still need DB-level monitoring (AWR\/ASH\/Enterprise Manager if used) for deep performance diagnostics.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">8) Auditability via OCI Audit<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>What it does:<\/strong> Tracks OCI API\/console actions against resources.<\/li>\n<li><strong>Why it matters:<\/strong> Compliance and forensics.<\/li>\n<li><strong>Practical benefit:<\/strong> Identify who changed network rules, resized clusters, or deleted databases.<\/li>\n<li><strong>Caveat:<\/strong> Database internal auditing is separate and must be configured inside the database if required.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">9) Backup integrations (service + Oracle tooling)<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>What it does:<\/strong> Supports database backup strategies using Oracle tools and OCI-supported backup capabilities.<\/li>\n<li><strong>Why it matters:<\/strong> Data protection and recoverability.<\/li>\n<li><strong>Practical benefit:<\/strong> Define retention and recovery procedures.<\/li>\n<li><strong>Caveat:<\/strong> Exact backup destinations, automation, and cross-region options depend on service capabilities\u2014verify.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">10) Maintenance orchestration (platform lifecycle)<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>What it does:<\/strong> Supports planned maintenance for underlying infrastructure and components.<\/li>\n<li><strong>Why it matters:<\/strong> Predictability and reduced operational risk.<\/li>\n<li><strong>Practical benefit:<\/strong> Maintenance windows and managed patch processes (scope depends on service).<\/li>\n<li><strong>Caveat:<\/strong> You must align application change windows and test patching strategies.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">11) High availability options (service- and database-level)<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>What it does:<\/strong> Enables availability patterns at cluster\/database level (for example, Oracle RAC, Data Guard).<\/li>\n<li><strong>Why it matters:<\/strong> Reduce downtime and meet RTO\/RPO targets.<\/li>\n<li><strong>Practical benefit:<\/strong> Business continuity.<\/li>\n<li><strong>Caveat:<\/strong> Not all HA options are available or configured the same across Exascale vs Dedicated\u2014verify for your region and license.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">12) Integration with OCI Vault (keys and secrets) \u2014 if supported<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>What it does:<\/strong> Central key management and secret storage.<\/li>\n<li><strong>Why it matters:<\/strong> Better security controls and key rotation.<\/li>\n<li><strong>Practical benefit:<\/strong> Centralize encryption key governance.<\/li>\n<li><strong>Caveat:<\/strong> Confirm supported encryption domains (TDE keys, backups, wallets) for Exascale\u2014verify.<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">7. Architecture and How It Works<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">High-level architecture<\/h3>\n\n\n\n<p>At a high level, Exadata Database Service on Exascale Infrastructure looks like this:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Control plane (OCI-managed):<\/strong> Console\/API requests create and manage Exascale infrastructure, VM clusters, database homes, and databases.<\/li>\n<li><strong>Data plane (your VCN):<\/strong> Your application and admin clients connect privately to database endpoints in your VCN.<\/li>\n<li><strong>Operations plane:<\/strong> Metrics, logs, and audit events flow into OCI Monitoring\/Logging\/Audit for governance and operations.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Request\/data\/control flow<\/h3>\n\n\n\n<ol class=\"wp-block-list\">\n<li>\n<p><strong>Provisioning flow (control plane):<\/strong>\n   &#8211; An admin uses OCI Console\/CLI\/Terraform to create Exascale infrastructure \u2192 VM cluster \u2192 database home \u2192 database.\n   &#8211; OCI orchestrates provisioning and attaches network interfaces to your VCN\/subnets.<\/p>\n<\/li>\n<li>\n<p><strong>Application flow (data plane):<\/strong>\n   &#8211; App connects to Oracle DB listener endpoints (commonly TCP 1521; TCPS typically 2484; exact ports depend on your configuration\u2014verify).\n   &#8211; Traffic remains within VCN or traverses private connectivity (DRG + FastConnect\/VPN) from on-prem.<\/p>\n<\/li>\n<li>\n<p><strong>Observability flow (operations plane):<\/strong>\n   &#8211; OCI emits metrics and audit events.\n   &#8211; You configure alarms and notifications.\n   &#8211; Database-level logs and traces remain inside the database\/host context; integrate with your tooling per policy and compliance.<\/p>\n<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\">Integrations with related OCI services<\/h3>\n\n\n\n<p>Common integrations include:\n&#8211; <strong>VCN \/ Subnets \/ NSGs \/ Route tables<\/strong>: Private access and segmentation.\n&#8211; <strong>Bastion<\/strong>: Controlled SSH access for admin jump hosts (recommended vs public IPs).\n&#8211; <strong>FastConnect \/ IPSec VPN \/ DRG<\/strong>: Hybrid connectivity.\n&#8211; <strong>OCI Monitoring + Alarms + Notifications<\/strong>: Alerting and ops.\n&#8211; <strong>OCI Logging<\/strong>: Central log aggregation (where supported).\n&#8211; <strong>OCI Audit<\/strong>: Control-plane audit trail.\n&#8211; <strong>OCI Vault<\/strong>: Keys\/secrets (verify applicability).\n&#8211; <strong>Object Storage<\/strong>: Often used in backup and export workflows (verify best practice for your backup toolchain).<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Dependency services<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>IAM (tenancy, compartments, policies)<\/li>\n<li>Networking (VCN\/subnets)<\/li>\n<li>DNS (VCN DNS or custom DNS for SCAN\/listeners; verify)<\/li>\n<li>Quotas\/limits for database resources in the region<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Security\/authentication model<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>OCI IAM<\/strong> authenticates API calls and controls resource permissions.<\/li>\n<li><strong>Database authentication<\/strong> remains Oracle Database authentication (users\/roles, password, enterprise identity integrations if configured).<\/li>\n<li><strong>Network authentication<\/strong> relies on private routing and NSG\/Security List rules.<\/li>\n<li><strong>Encryption<\/strong> typically includes TDE for database at rest and TLS for in transit (verify defaults and options).<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Networking model<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Typically <strong>private endpoints<\/strong> in subnets you provide.<\/li>\n<li>Use NSGs to:<\/li>\n<li>Allow app subnets to connect to DB listener ports<\/li>\n<li>Allow admin access from bastion\/jump subnet<\/li>\n<li>Deny all else by default<\/li>\n<li>No public database exposure is recommended.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Monitoring\/logging\/governance considerations<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Use OCI Monitoring alarms for resource-level indicators.<\/li>\n<li>Use OCI Audit for \u201cwho did what\u201d on the OCI side.<\/li>\n<li>Use database-native performance tooling for query-level diagnostics.<\/li>\n<li>Tag resources for cost allocation and governance.<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<h3 class=\"wp-block-heading\">Simple architecture diagram (Mermaid)<\/h3>\n\n\n\n<pre><code class=\"language-mermaid\">flowchart LR\n  Dev[DBA\/Admin] --&gt;|OCI Console\/API| OCI[Oracle Cloud Control Plane]\n  OCI --&gt; EXI[Exascale Infrastructure]\n  EXI --&gt; VMC[Exadata VM Cluster]\n  VMC --&gt; DB[(Oracle Database)]\n\n  App[Application] --&gt;|Private SQL*Net\/TLS| DB\n  App --- VCN[VCN Private Subnets]\n  DB --- VCN\n\n  OCI --&gt; Mon[OCI Monitoring\/Alarms]\n  OCI --&gt; Aud[OCI Audit]\n<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">Production-style architecture diagram (Mermaid)<\/h3>\n\n\n\n<pre><code class=\"language-mermaid\">flowchart TB\n  subgraph OnPrem[On-Prem \/ Branch]\n    Users[Users]\n    CorpApps[Enterprise Apps]\n  end\n\n  subgraph OCIRegion[OCI Region]\n    subgraph HubVCN[Hub VCN]\n      FW[Network Firewall \/ Inspection\\n(optional)]\n      DRG[DRG]\n      Bastion[Bastion Service]\n    end\n\n    subgraph SpokeVCN[Spoke VCN - Data]\n      AppSub[App Subnet (Private)]\n      AdminSub[Admin Subnet (Private)]\n      DBSub[DB Subnet (Private)]\n      NSG[NSGs \/ Security Lists]\n      EXI[Exascale Infrastructure]\n      VMC[Exadata VM Cluster]\n      DB[(Oracle Database)]\n    end\n\n    Mon[OCI Monitoring + Alarms]\n    Log[OCI Logging (where supported)]\n    Aud[OCI Audit]\n    Notif[Notifications]\n    Vault[OCI Vault (keys\/secrets)\\nverify support]\n  end\n\n  Users --&gt; CorpApps\n  CorpApps --&gt;|FastConnect or IPSec VPN| DRG\n  DRG --&gt; FW\n  FW --&gt; AppSub\n  Bastion --&gt; AdminSub\n\n  AppSub --&gt;|SQL*Net \/ TCPS| DB\n  AdminSub --&gt;|SQL*Plus\/SQLcl, admin tools| DB\n\n  EXI --&gt; VMC --&gt; DB\n  NSG --- AppSub\n  NSG --- AdminSub\n  NSG --- DBSub\n\n  Mon --&gt; Notif\n  Aud --&gt; Log\n  Vault --&gt; DB\n<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">8. Prerequisites<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Tenancy\/account requirements<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>An active <strong>Oracle Cloud<\/strong> tenancy with billing enabled.<\/li>\n<li>Access to a region where <strong>Exadata Database Service on Exascale Infrastructure<\/strong> is available. Availability is not universal across all OCI regions. <strong>Verify availability in the console or official region\/service availability pages<\/strong>.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Permissions \/ IAM roles<\/h3>\n\n\n\n<p>You typically need:\n&#8211; Permission to manage networking (VCN, subnets, NSGs)\n&#8211; Permission to manage database resources (Exadata\/VM clusters\/databases)\n&#8211; Permission to view metrics and audit logs<\/p>\n\n\n\n<p><strong>Example IAM policy patterns (verify exact resource types for Exascale):<\/strong><\/p>\n\n\n\n<pre><code class=\"language-text\">Allow group DB-Admins to manage database-family in compartment Prod-Data\nAllow group Net-Admins to manage virtual-network-family in compartment Prod-Network\nAllow group Sec-Admins to read audit-events in tenancy\nAllow group Ops to read metrics in compartment Prod-Data\n<\/code><\/pre>\n\n\n\n<blockquote>\n<p>Note: OCI has specific resource-types for Exadata (for example, <code>cloud-vm-clusters<\/code>, <code>exadata-infrastructures<\/code>) in some contexts. For Exascale, the resource-type naming may differ. <strong>Confirm policy resource types in the official Exadata\/OCI IAM documentation<\/strong>.<\/p>\n<\/blockquote>\n\n\n\n<h3 class=\"wp-block-heading\">Billing requirements<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>This is <strong>not<\/strong> an Always Free service.<\/li>\n<li>Costs can be significant if you leave resources running. Ensure budget alerts are configured.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Tools you may need<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>OCI Console access<\/li>\n<li>OCI CLI (optional): https:\/\/docs.oracle.com\/en-us\/iaas\/Content\/API\/SDKDocs\/cliinstall.htm<\/li>\n<li>SQL client tooling:<\/li>\n<li>Oracle SQLcl, SQL*Plus, or another Oracle-compatible client<\/li>\n<li>Oracle Instant Client (for SQL*Plus) if required<\/li>\n<li>SSH client if you use a bastion\/jump host<\/li>\n<li>(Optional) Terraform if your org provisions infrastructure as code (verify OCI provider supports the exact Exascale resource types you need)<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Region availability<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Verify in:<\/li>\n<li>OCI Console (service creation workflow)<\/li>\n<li>Official region\/service availability documentation (OCI docs)<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Quotas\/limits<\/h3>\n\n\n\n<p>Common limit categories:\n&#8211; Number of Exadata infrastructures \/ VM clusters\n&#8211; ECPU\/CPU allocation caps\n&#8211; Storage allocation caps\n&#8211; Network resource limits (VCN\/subnets\/NSGs)\n&#8211; Backup storage and Object Storage limits (if used)<\/p>\n\n\n\n<p>Check:\n&#8211; OCI <strong>Limits, Quotas, and Usage<\/strong> in the Console and request increases ahead of time.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Prerequisite services<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>VCN with subnets designed for:<\/li>\n<li>Database endpoints<\/li>\n<li>Admin access (private)<\/li>\n<li>Application access (private)<\/li>\n<li>Optional but recommended:<\/li>\n<li>Bastion Service (or a controlled jump host)<\/li>\n<li>DRG + FastConnect\/VPN if connecting from on-prem<\/li>\n<li>OCI Vault (if you use customer-managed keys and it\u2019s supported for your configuration)<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">9. Pricing \/ Cost<\/h2>\n\n\n\n<blockquote>\n<p>Pricing changes over time and varies by region, license model, and SKU. Do not rely on static blog numbers. Always verify with Oracle\u2019s official pricing pages and the OCI cost estimator.<\/p>\n<\/blockquote>\n\n\n\n<h3 class=\"wp-block-heading\">Current pricing model (how you\u2019re billed)<\/h3>\n\n\n\n<p>Exadata Database Service on Exascale Infrastructure generally includes pricing dimensions such as:\n&#8211; <strong>Compute allocation\/consumption<\/strong> (often expressed in CPU units like ECPU\/OCPU depending on OCI service model\u2014verify for Exascale)\n&#8211; <strong>Exadata storage capacity<\/strong> (allocated\/used)\n&#8211; <strong>Database licensing model<\/strong>\n  &#8211; <strong>License Included<\/strong> (Oracle Database license bundled)\n  &#8211; <strong>Bring Your Own License (BYOL)<\/strong> (requires eligible Oracle licenses)\n&#8211; <strong>Backups\/storage<\/strong> (depending on backup approach and destination)\n&#8211; <strong>Network egress<\/strong> (data leaving OCI region to the internet or cross-region; intra-VCN is typically not charged the same way\u2014verify OCI network pricing)<\/p>\n\n\n\n<p>Official pricing entry points:\n&#8211; OCI pricing: https:\/\/www.oracle.com\/cloud\/pricing\/\n&#8211; OCI price list: https:\/\/www.oracle.com\/cloud\/price-list\/\n&#8211; OCI cost estimator: https:\/\/www.oracle.com\/cloud\/costestimator.html<\/p>\n\n\n\n<blockquote>\n<p>Tip: In the price list, navigate to database services and look for Exadata-related SKUs, then confirm the \u201cExascale Infrastructure\u201d SKUs specifically.<\/p>\n<\/blockquote>\n\n\n\n<h3 class=\"wp-block-heading\">Free tier<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Exadata Database Service on Exascale Infrastructure is <strong>not<\/strong> part of OCI Always Free.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Primary cost drivers<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Allocated compute (ECPU\/OCPU) and hours running<\/strong><\/li>\n<li><strong>Allocated storage (TB) and provisioned capacity<\/strong><\/li>\n<li><strong>License model<\/strong> (License Included is typically more expensive than BYOL, but BYOL requires qualifying licenses)<\/li>\n<li><strong>Environment count<\/strong> (dev\/test\/prod) and how long each runs<\/li>\n<li><strong>Backup retention<\/strong> (long retention increases storage costs)<\/li>\n<li><strong>Data egress<\/strong> to on-prem or internet<\/li>\n<li><strong>Operational tooling<\/strong> (third-party monitoring, Enterprise Manager, etc.)<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Hidden\/indirect costs to plan for<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Connectivity<\/strong>: FastConnect circuits, VPN operations, routing design.<\/li>\n<li><strong>Bastion\/jump hosts<\/strong>: compute instances and storage if self-managed.<\/li>\n<li><strong>Data migration<\/strong>: transfer appliances\/services, temporary staging storage, extra compute for import.<\/li>\n<li><strong>DR environment<\/strong>: standby databases effectively double some costs.<\/li>\n<li><strong>Downtime windows<\/strong>: if you must run parallel systems during cutover.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Network\/data transfer implications<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Private traffic within a VCN is typically not billed as internet egress, but:<\/li>\n<li>Cross-region replication\/backup and internet egress are usually billable.<\/li>\n<li>FastConnect has its own pricing model.<\/li>\n<li>Confirm on OCI network pricing pages.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">How to optimize cost (practical levers)<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Right-size compute<\/strong>: start with the minimum required for your workload and scale based on measured metrics.<\/li>\n<li><strong>Schedule non-production downtime<\/strong>: stop or scale down dev\/test outside business hours if supported by your operational model (verify what \u201cstop\u201d means for Exascale resources).<\/li>\n<li><strong>Use BYOL if eligible<\/strong>: only if your licenses qualify and compliance is verified.<\/li>\n<li><strong>Set budgets and alerts<\/strong>: OCI Budgets + Notifications.<\/li>\n<li><strong>Tag resources<\/strong>: allocate costs to teams\/apps.<\/li>\n<li><strong>Minimize egress<\/strong>: keep app tier in the same region\/VCN when possible.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Example low-cost starter estimate (non-numeric, model-based)<\/h3>\n\n\n\n<p>A \u201cstarter\u201d environment cost depends on:\n&#8211; Minimum compute allocation allowed for a VM cluster (verify minimum)\n&#8211; Minimum storage allocation\n&#8211; Whether License Included or BYOL is selected\n&#8211; How many hours you keep it running<\/p>\n\n\n\n<p>Use the OCI Cost Estimator:\n1. Choose region\n2. Select Exadata Database Service (Exascale Infrastructure)\n3. Choose license model\n4. Enter smallest allowed compute and storage\n5. Add backup storage assumptions<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Example production cost considerations (what changes)<\/h3>\n\n\n\n<p>For production, plan for:\n&#8211; Higher baseline compute + headroom for spikes\n&#8211; HA\/DR (standby) capacity and duplication of storage\/backup\n&#8211; Longer retention backups\n&#8211; Performance testing environments\n&#8211; 24\u00d77 operations (continuous hourly charges)<\/p>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">10. Step-by-Step Hands-On Tutorial<\/h2>\n\n\n\n<p>This lab is designed to be <strong>realistic and executable<\/strong>, but it may not be \u201ccheap\u201d because Exadata services are premium. The lab emphasizes safe design (private networking, least privilege) and clean teardown.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Objective<\/h3>\n\n\n\n<p>Provision <strong>Exadata Database Service on Exascale Infrastructure<\/strong> in Oracle Cloud, create an Exadata VM cluster and an Oracle database, connect securely from a private admin host, validate connectivity, set up basic monitoring, and then cleanly delete resources to stop charges.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Lab Overview<\/h3>\n\n\n\n<p>You will:\n1. Create a compartment and tagging strategy (governance)\n2. Build a VCN with private subnets and NSGs (security)\n3. Provision Exascale infrastructure + VM cluster (data platform)\n4. Create a database home and database (data management)\n5. Connect using SQL tooling from a private admin host (validation)\n6. Create basic alarms and review audit logs (operations)\n7. Clean up all resources (cost control)<\/p>\n\n\n\n<blockquote>\n<p>Expected time: provisioning may take <strong>hours<\/strong> depending on region capacity and service workflows.<br\/>\nExpected cost: potentially significant if you leave resources running. Use budgets and delete everything at the end.<\/p>\n<\/blockquote>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<h3 class=\"wp-block-heading\">Step 1: Create a compartment and tags<\/h3>\n\n\n\n<p><strong>Goal:<\/strong> isolate lab resources and enable cost tracking.<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>In OCI Console, open <strong>Identity &amp; Security \u2192 Compartments<\/strong>.<\/li>\n<li>Click <strong>Create Compartment<\/strong>:\n   &#8211; Name: <code>lab-exascale<\/code>\n   &#8211; Description: <code>Exascale Exadata lab<\/code>\n   &#8211; Parent: pick a sandbox parent compartment if available<\/li>\n<li>(Recommended) Create a tag namespace:\n   &#8211; <strong>Governance &amp; Administration \u2192 Tag Namespaces<\/strong>\n   &#8211; Namespace: <code>lab<\/code>\n   &#8211; Tag keys:<ul>\n<li><code>owner<\/code><\/li>\n<li><code>purpose<\/code><\/li>\n<li><code>expiresOn<\/code><\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<p><strong>Expected outcome<\/strong>\n&#8211; A compartment dedicated to this lab.\n&#8211; Tags available for all resources.<\/p>\n\n\n\n<p><strong>Verification<\/strong>\n&#8211; You can filter resources by compartment <code>lab-exascale<\/code>.<\/p>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<h3 class=\"wp-block-heading\">Step 2: Set up IAM access (least privilege)<\/h3>\n\n\n\n<p><strong>Goal:<\/strong> ensure you (and only you) can manage these resources.<\/p>\n\n\n\n<p>If your tenancy uses groups:\n1. <strong>Identity &amp; Security \u2192 Groups<\/strong>: confirm you are in an admin\/DB admin group for the lab.\n2. Create or update a policy in the parent compartment (or tenancy) scoped to your lab compartment.<\/p>\n\n\n\n<p><strong>Example policy (use as a starting point; verify resource types as needed):<\/strong><\/p>\n\n\n\n<pre><code class=\"language-text\">Allow group Lab-DB-Admins to manage database-family in compartment lab-exascale\nAllow group Lab-Net-Admins to manage virtual-network-family in compartment lab-exascale\nAllow group Lab-Ops to read metrics in compartment lab-exascale\nAllow group Lab-Sec to read audit-events in compartment lab-exascale\n<\/code><\/pre>\n\n\n\n<p><strong>Expected outcome<\/strong>\n&#8211; Your user can create networks and database resources in the lab compartment.<\/p>\n\n\n\n<p><strong>Verification<\/strong>\n&#8211; Try opening <strong>Database \u2192 Exadata Database Service<\/strong> and confirm you can access \u201cCreate\u201d actions (without actually creating yet).<\/p>\n\n\n\n<p><strong>Common error<\/strong>\n&#8211; <em>Authorization failed or policy not effective<\/em><br\/>\n  Fix: confirm policy is in the correct parent compartment and that your group membership is correct. OCI policies can take a short time to propagate.<\/p>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<h3 class=\"wp-block-heading\">Step 3: Create networking (VCN, subnets, NSGs)<\/h3>\n\n\n\n<p><strong>Goal:<\/strong> private-only access with controlled ports.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">3.1 Create the VCN<\/h4>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>Networking \u2192 Virtual Cloud Networks<\/strong><\/li>\n<li><strong>Create VCN<\/strong>\n   &#8211; Name: <code>vcn-exascale-lab<\/code>\n   &#8211; CIDR: choose an unused range (example <code>10.10.0.0\/16<\/code>)\n   &#8211; DNS: enable DNS hostnames (recommended)<\/li>\n<\/ol>\n\n\n\n<p>Choose \u201cVCN with Internet Connectivity\u201d only if you plan to use a public subnet for a temporary bastion. A more secure pattern is <strong>private subnets<\/strong> plus <strong>Bastion Service<\/strong>.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">3.2 Create subnets (private)<\/h4>\n\n\n\n<p>Create at least:\n&#8211; <code>subnet-admin-private<\/code> (e.g., <code>10.10.10.0\/24<\/code>)\n&#8211; <code>subnet-db-private<\/code> (e.g., <code>10.10.20.0\/24<\/code>)\n&#8211; <code>subnet-app-private<\/code> (optional) (e.g., <code>10.10.30.0\/24<\/code>)<\/p>\n\n\n\n<p>Use <strong>Private Subnet<\/strong> (no public IP assignment).<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">3.3 Create NSGs (recommended)<\/h4>\n\n\n\n<p>Create NSGs:\n&#8211; <code>nsg-admin<\/code>\n&#8211; <code>nsg-db<\/code>\n&#8211; <code>nsg-app<\/code> (optional)<\/p>\n\n\n\n<p>Add rules (adjust to your standards; verify required Exadata ports\/endpoints in official docs):<\/p>\n\n\n\n<p><strong>Admin \u2192 DB<\/strong>\n&#8211; Allow TCP to DB listener ports (commonly 1521 for SQL*Net; 2484 for TCPS\u2014verify)\n&#8211; Allow ICMP for troubleshooting (optional)<\/p>\n\n\n\n<p><strong>App \u2192 DB<\/strong>\n&#8211; Allow TCP to DB listener ports from app subnet NSG<\/p>\n\n\n\n<p><strong>Bastion\/SSH<\/strong>\n&#8211; If you run a jump host: allow TCP 22 only from your corporate IPs (or use OCI Bastion).<\/p>\n\n\n\n<blockquote>\n<p>Exadata deployments may require additional network ports for cluster interconnect, backups, or management. <strong>Use OCI\u2019s official Exadata networking prerequisites for Exascale<\/strong> and do not rely solely on generic Oracle DB ports.<\/p>\n<\/blockquote>\n\n\n\n<p><strong>Expected outcome<\/strong>\n&#8211; A VCN with private subnets and NSG rules.<\/p>\n\n\n\n<p><strong>Verification<\/strong>\n&#8211; Confirm subnets show \u201cPrivate\u201d.\n&#8211; Confirm NSGs have only the minimal required ingress.<\/p>\n\n\n\n<p><strong>Common errors and fixes<\/strong>\n&#8211; <em>Can\u2019t resolve private hostnames:<\/em> enable VCN DNS hostnames and use correct DNS resolver settings.\n&#8211; <em>Timeout connecting later:<\/em> verify route tables, NSGs, and security lists (NSGs are preferred for clarity).<\/p>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<h3 class=\"wp-block-heading\">Step 4: Provision an admin host (private) for database connectivity tests<\/h3>\n\n\n\n<p><strong>Goal:<\/strong> connect to the database without exposing it publicly.<\/p>\n\n\n\n<p>Two common approaches:<\/p>\n\n\n\n<p><strong>Option A (recommended): OCI Bastion + private compute instance<\/strong><br\/>\n&#8211; Create a small compute instance in <code>subnet-admin-private<\/code>\n&#8211; Use <strong>OCI Bastion<\/strong> to SSH to it without public IPs<\/p>\n\n\n\n<p><strong>Option B (simpler but less ideal): public jump host<\/strong><br\/>\n&#8211; Create a compute instance with a public IP in a public subnet and lock down SSH to your IP.\n&#8211; Not recommended for production; acceptable for a short lab if tightly restricted.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">4.1 Create a small compute instance<\/h4>\n\n\n\n<ol class=\"wp-block-list\">\n<li>\n<p><strong>Compute \u2192 Instances \u2192 Create instance<\/strong>\n   &#8211; Name: <code>admin-host<\/code>\n   &#8211; Compartment: <code>lab-exascale<\/code>\n   &#8211; VCN\/Subnet: <code>vcn-exascale-lab<\/code> \/ <code>subnet-admin-private<\/code>\n   &#8211; Assign public IP: <strong>No<\/strong>\n   &#8211; Add SSH key<\/p>\n<\/li>\n<li>\n<p>Use OCI Bastion:\n   &#8211; <strong>Identity &amp; Security \u2192 Bastion<\/strong>\n   &#8211; Create a bastion in the VCN, then create an SSH session to <code>admin-host<\/code>.<\/p>\n<\/li>\n<\/ol>\n\n\n\n<p><strong>Expected outcome<\/strong>\n&#8211; You can SSH to <code>admin-host<\/code> through Bastion.<\/p>\n\n\n\n<p><strong>Verification<\/strong>\n&#8211; From your terminal, connect through the Bastion session and reach a shell prompt on <code>admin-host<\/code>.<\/p>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<h3 class=\"wp-block-heading\">Step 5: Create Exascale infrastructure<\/h3>\n\n\n\n<p><strong>Goal:<\/strong> create the Exadata Exascale infrastructure resource in your region.<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>OCI Console: <strong>Database \u2192 Exadata Database Service<\/strong><\/li>\n<li>Choose <strong>Exascale Infrastructure<\/strong> (wording may vary slightly).<\/li>\n<li>Click <strong>Create<\/strong> and provide:\n   &#8211; Compartment: <code>lab-exascale<\/code>\n   &#8211; Display name: <code>exascale-infra-lab<\/code>\n   &#8211; Network choices (if required at this stage): select your VCN\/subnets as prompted\n   &#8211; Maintenance preferences (if prompted): select an appropriate window<\/li>\n<\/ol>\n\n\n\n<p><strong>Expected outcome<\/strong>\n&#8211; Exascale infrastructure begins provisioning.<\/p>\n\n\n\n<p><strong>Verification<\/strong>\n&#8211; Status shows <strong>Provisioning<\/strong> then <strong>Available<\/strong> (or similar).<\/p>\n\n\n\n<p><strong>Common errors<\/strong>\n&#8211; <em>Insufficient quota\/limit:<\/em> request limit increase in OCI.\n&#8211; <em>Region not supported:<\/em> choose a supported region.<\/p>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<h3 class=\"wp-block-heading\">Step 6: Create an Exadata VM cluster on Exascale Infrastructure<\/h3>\n\n\n\n<p><strong>Goal:<\/strong> create the cluster layer where databases will run.<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>From the Exascale infrastructure page, click <strong>Create VM cluster<\/strong> (or navigate to VM clusters and create one).<\/li>\n<li>Provide:\n   &#8211; Compartment: <code>lab-exascale<\/code>\n   &#8211; Display name: <code>vmc-lab<\/code>\n   &#8211; VCN\/subnet: choose <code>subnet-db-private<\/code>\n   &#8211; NSGs: attach <code>nsg-db<\/code>\n   &#8211; CPU allocation: choose the smallest allowed allocation for the lab (verify minimum)\n   &#8211; License model: BYOL or License Included (choose based on your eligibility and cost preference)\n   &#8211; SSH keys for administrative access (if required)<\/li>\n<\/ol>\n\n\n\n<p><strong>Expected outcome<\/strong>\n&#8211; VM cluster provisions and becomes <strong>Available<\/strong>.<\/p>\n\n\n\n<p><strong>Verification<\/strong>\n&#8211; VM cluster status is <strong>Available<\/strong>.\n&#8211; Note down:\n  &#8211; SCAN name \/ endpoints\n  &#8211; Private IPs \/ DNS names\n  &#8211; Connection strings (if displayed)<\/p>\n\n\n\n<p><strong>Common errors<\/strong>\n&#8211; <em>Subnet not valid \/ DNS not enabled:<\/em> ensure VCN DNS and subnet requirements meet Exadata prerequisites.\n&#8211; <em>Wrong NSG rules:<\/em> add required ports and test from admin host later.<\/p>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<h3 class=\"wp-block-heading\">Step 7: Create a database home and database<\/h3>\n\n\n\n<p><strong>Goal:<\/strong> deploy Oracle Database software and create a database.<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>In the VM cluster, choose <strong>Create database<\/strong> (or create a Database Home first, depending on UI flow).<\/li>\n<li>Choose:\n   &#8211; Database version (e.g., 19c\/21c depending on region support\u2014verify)\n   &#8211; Database name (e.g., <code>LABDB<\/code>)\n   &#8211; Admin password (store securely)\n   &#8211; Workload type (OLTP\/DW) if prompted\n   &#8211; Storage and other options as presented<\/li>\n<\/ol>\n\n\n\n<p><strong>Expected outcome<\/strong>\n&#8211; Database provisioning completes and the database becomes <strong>Available<\/strong>.<\/p>\n\n\n\n<p><strong>Verification<\/strong>\n&#8211; The database resource shows status <strong>Available<\/strong>.\n&#8211; Copy the <strong>connection details<\/strong> provided by OCI (SCAN hostname\/service name, etc.).<\/p>\n\n\n\n<p><strong>Common errors<\/strong>\n&#8211; <em>Password complexity failure:<\/em> follow OCI UI rules precisely.\n&#8211; <em>Provisioning fails due to network:<\/em> verify subnet, NSG, and any required service gateways or DNS.<\/p>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<h3 class=\"wp-block-heading\">Step 8: Connect to the database from the admin host<\/h3>\n\n\n\n<p><strong>Goal:<\/strong> validate private connectivity and basic SQL access.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">8.1 Install SQL tooling on admin host<\/h4>\n\n\n\n<p>On the admin host, install a SQL client. Options:\n&#8211; <strong>SQLcl<\/strong> (simple Java-based client)\n&#8211; <strong>Oracle Instant Client + SQL*Plus<\/strong><\/p>\n\n\n\n<p>Because package names vary by OS image, use Oracle\u2019s official instructions for your chosen client:\n&#8211; SQLcl: https:\/\/www.oracle.com\/database\/sqldeveloper\/technologies\/sqlcl\/\n&#8211; Instant Client: https:\/\/www.oracle.com\/database\/technologies\/instant-client.html<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">8.2 Test DNS and port connectivity<\/h4>\n\n\n\n<p>From <code>admin-host<\/code>:<\/p>\n\n\n\n<pre><code class=\"language-bash\"># Replace with your DB SCAN hostname from OCI connection details\nnslookup &lt;scan-hostname&gt;\n\n# Test port reachability (use 1521 or your configured port)\n# If nc isn't installed, install it or use telnet as available\nnc -vz &lt;scan-hostname&gt; 1521\n<\/code><\/pre>\n\n\n\n<p><strong>Expected outcome<\/strong>\n&#8211; DNS resolves to private IPs.\n&#8211; Port test succeeds.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">8.3 Connect using SQL*Plus or SQLcl<\/h4>\n\n\n\n<p>Using SQL*Plus-style EZCONNECT (example; adjust to OCI-provided connect string):<\/p>\n\n\n\n<pre><code class=\"language-bash\">sqlplus system@\/\/&lt;scan-hostname&gt;:1521\/&lt;service_name&gt;\n<\/code><\/pre>\n\n\n\n<p>Run a simple query:<\/p>\n\n\n\n<pre><code class=\"language-sql\">SELECT name, open_mode FROM v$database;\n<\/code><\/pre>\n\n\n\n<p><strong>Expected outcome<\/strong>\n&#8211; You can log in and query the database.\n&#8211; <code>OPEN_MODE<\/code> is typically <code>READ WRITE<\/code> for a primary database.<\/p>\n\n\n\n<p><strong>Verification checklist<\/strong>\n&#8211; Connection is private (client is inside VCN).\n&#8211; Query returns expected database name and open mode.<\/p>\n\n\n\n<p><strong>Common errors and fixes<\/strong>\n&#8211; <em>ORA-12514 \/ service not known:<\/em> use the exact service name from OCI connection strings.\n&#8211; <em>Timeout \/ no route:<\/em> verify NSG rules and route tables.\n&#8211; <em>TLS issues (TCPS):<\/em> if using TCPS, ensure wallet\/cert setup is correct (follow OCI connection instructions; verify).<\/p>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<h3 class=\"wp-block-heading\">Step 9: Configure basic monitoring (alarm) and review audit events<\/h3>\n\n\n\n<p><strong>Goal:<\/strong> operational readiness basics.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">9.1 Create an alarm (OCI Monitoring)<\/h4>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>Observability &amp; Management \u2192 Monitoring \u2192 Alarms \u2192 Create Alarm<\/strong><\/li>\n<li>Select the compartment <code>lab-exascale<\/code>.<\/li>\n<li>Choose a relevant metric for the VM cluster or database resource (available metrics vary\u2014verify in your environment).<\/li>\n<li>Set:\n   &#8211; Severity: Warning\n   &#8211; Trigger: e.g., high CPU for 15 minutes (choose a conservative threshold)<\/li>\n<li>Create a Notifications topic and subscription (email) if you don\u2019t have one.<\/li>\n<\/ol>\n\n\n\n<p><strong>Expected outcome<\/strong>\n&#8211; An alarm exists and can notify you.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">9.2 Review OCI Audit<\/h4>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>Identity &amp; Security \u2192 Audit<\/strong><\/li>\n<li>Filter by compartment <code>lab-exascale<\/code>.<\/li>\n<li>Confirm events for:\n   &#8211; Create VCN\/subnets\/NSGs\n   &#8211; Create Exascale infrastructure\n   &#8211; Create VM cluster\n   &#8211; Create database<\/li>\n<\/ol>\n\n\n\n<p><strong>Expected outcome<\/strong>\n&#8211; Audit trail records your actions.<\/p>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<h3 class=\"wp-block-heading\">Validation<\/h3>\n\n\n\n<p>Use this end-to-end validation list:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>Infrastructure status:<\/strong> Exascale infrastructure = Available  <\/li>\n<li><strong>VM cluster status:<\/strong> VM cluster = Available  <\/li>\n<li><strong>Database status:<\/strong> Database = Available and <code>READ WRITE<\/code> <\/li>\n<li><strong>Network validation:<\/strong> From admin host:\n   &#8211; DNS resolves SCAN hostname\n   &#8211; Port 1521\/2484 reachable<\/li>\n<li><strong>SQL validation:<\/strong> <code>SELECT 1 FROM dual;<\/code> succeeds<\/li>\n<li><strong>Operations validation:<\/strong> Alarm created; audit events visible<\/li>\n<\/ol>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<h3 class=\"wp-block-heading\">Troubleshooting<\/h3>\n\n\n\n<p>Common issues you can solve quickly:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>\n<p><strong>Provisioning stuck<\/strong>\n   &#8211; Check service limits\/quota.\n   &#8211; Check OCI \u201cWork Requests\u201d for failure reasons (resource pages often link to work requests).<\/p>\n<\/li>\n<li>\n<p><strong>Can\u2019t connect (timeout)<\/strong>\n   &#8211; Confirm you are connecting from inside the VCN (admin host).\n   &#8211; Confirm NSG rules allow inbound to DB listener ports from admin\/app NSGs.\n   &#8211; Confirm route tables (should be local within VCN for intra-subnet traffic).\n   &#8211; Confirm DNS hostnames enabled and correct resolver.<\/p>\n<\/li>\n<li>\n<p><strong>ORA-12514 \/ ORA-12154<\/strong>\n   &#8211; Use the exact connect descriptor from OCI.\n   &#8211; Verify service name vs SID.\n   &#8211; If using TNSNAMES, confirm file paths and environment variables.<\/p>\n<\/li>\n<li>\n<p><strong>Authentication failures<\/strong>\n   &#8211; Confirm correct admin password.\n   &#8211; Check for locked accounts or password expiry (policy dependent).<\/p>\n<\/li>\n<li>\n<p><strong>Alarm not firing<\/strong>\n   &#8211; Confirm metric namespace and dimension selection.\n   &#8211; Confirm notification topic subscription is confirmed.<\/p>\n<\/li>\n<\/ol>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<h3 class=\"wp-block-heading\">Cleanup<\/h3>\n\n\n\n<p><strong>Important:<\/strong> delete resources to stop ongoing charges.<\/p>\n\n\n\n<p>Delete in the correct order (dependencies matter):<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>Delete databases<\/strong> created in the VM cluster.<\/li>\n<li><strong>Delete database homes<\/strong> (if required after deleting DBs).<\/li>\n<li><strong>Delete the VM cluster<\/strong>.<\/li>\n<li><strong>Delete the Exascale infrastructure<\/strong> (after dependent resources are gone).<\/li>\n<li><strong>Terminate the admin host<\/strong> compute instance.<\/li>\n<li><strong>Delete Bastion<\/strong> (if created).<\/li>\n<li><strong>Delete NSGs<\/strong>, subnets, then the <strong>VCN<\/strong>.<\/li>\n<li>Remove or archive budgets\/alerts created for the lab.<\/li>\n<\/ol>\n\n\n\n<p><strong>Verification<\/strong>\n&#8211; In the lab compartment, confirm no Exadata\/Exascale resources remain.\n&#8211; Confirm billing stops increasing after the final hour\/day boundary (billing delay can occur).<\/p>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">11. Best Practices<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Architecture best practices<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Use private subnets only<\/strong> for databases; avoid public IPs.<\/li>\n<li><strong>Separate subnets<\/strong> for app, admin, and database tiers.<\/li>\n<li><strong>Design for hybrid<\/strong> if required: DRG + FastConnect\/VPN with clear routing.<\/li>\n<li><strong>Use compartments<\/strong> per environment (dev\/test\/prod) for isolation and policy boundaries.<\/li>\n<li><strong>Plan naming conventions<\/strong>: include env, app, region, and owner.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">IAM\/security best practices<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Enforce <strong>least privilege<\/strong>: separate DBA, platform, and network roles.<\/li>\n<li>Use <strong>MFA<\/strong> for privileged users.<\/li>\n<li>Prefer <strong>groups<\/strong> and policies; avoid direct user permissions.<\/li>\n<li>Use <strong>OCI Audit<\/strong> review routines (weekly\/monthly) for sensitive compartments.<\/li>\n<li>Apply <strong>resource tagging<\/strong> and optionally tag-based access controls (if your org uses them).<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Cost best practices<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Treat Exascale allocations as <strong>metered capacity<\/strong>\u2014scale intentionally.<\/li>\n<li>Use <strong>budgets and alerts<\/strong> in OCI.<\/li>\n<li>Keep <strong>non-prod<\/strong> environments smaller and schedule work to avoid idle runtime.<\/li>\n<li>Avoid unnecessary <strong>data egress<\/strong> (keep app tier close to DB).<\/li>\n<li>Build cleanup automation for ephemeral test stacks.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Performance best practices<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Use Oracle Database performance methodology:<\/li>\n<li>capture baselines<\/li>\n<li>index\/partition appropriately<\/li>\n<li>use SQL plan management where appropriate<\/li>\n<li>Separate workloads using <strong>resource management<\/strong> (verify Oracle DB features you use are licensed and supported).<\/li>\n<li>Monitor top SQL and wait events via supported tools (AWR\/ASH require licensing\u2014verify).<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Reliability best practices<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Define RTO\/RPO and map to features (Data Guard, backups, multi-region) \u2014 verify supported patterns.<\/li>\n<li>Test restore procedures regularly.<\/li>\n<li>Use change windows aligned with OCI maintenance events.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Operations best practices<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Centralize alerts (OCI Monitoring \u2192 Notifications \u2192 ticketing\/on-call).<\/li>\n<li>Track:<\/li>\n<li>capacity trends<\/li>\n<li>backup success<\/li>\n<li>patch\/maintenance events<\/li>\n<li>Standardize runbooks: provisioning, scaling, incident response, restore.<\/li>\n<li>Use Infrastructure as Code where supported (Terraform\/CLI) for repeatability.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Governance\/tagging\/naming best practices<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Mandatory tags: <code>costCenter<\/code>, <code>owner<\/code>, <code>environment<\/code>, <code>dataClassification<\/code>.<\/li>\n<li>Use consistent prefixes:<\/li>\n<li><code>exi-&lt;env&gt;-&lt;app&gt;<\/code><\/li>\n<li><code>vmc-&lt;env&gt;-&lt;app&gt;<\/code><\/li>\n<li><code>db-&lt;env&gt;-&lt;app&gt;<\/code><\/li>\n<li>Enforce policies for production compartments (prevent public IPs, restrict deletion, etc., where your governance model supports it).<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">12. Security Considerations<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Identity and access model<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>OCI IAM<\/strong> controls:<\/li>\n<li>who can create\/delete Exascale infrastructure, VM clusters, databases<\/li>\n<li>who can modify networking<\/li>\n<li>who can view audit logs and metrics<\/li>\n<li><strong>Oracle Database security<\/strong> controls:<\/li>\n<li>database users\/roles<\/li>\n<li>privilege management<\/li>\n<li>auditing inside the database<\/li>\n<\/ul>\n\n\n\n<p><strong>Recommendation:<\/strong> separate OCI resource admin roles from database superuser roles. Avoid giving every cloud admin SYSDBA access.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Encryption<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>In transit:<\/strong> use TLS\/TCPS where required; follow OCI-provided connection instructions.<\/li>\n<li><strong>At rest:<\/strong> Oracle Database typically uses TDE for tablespaces in enterprise deployments; confirm defaults and configuration options for Exascale.<\/li>\n<li><strong>Key management:<\/strong> If OCI Vault integration is supported for your configuration, prefer customer-managed keys for regulated environments (verify).<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Network exposure<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Keep DB endpoints private.<\/li>\n<li>Use:<\/li>\n<li>NSGs for explicit allowlists<\/li>\n<li>Bastion for admin access<\/li>\n<li>DRG for hybrid connectivity<\/li>\n<li>Avoid exposing Oracle listener ports to the public internet.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Secrets handling<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Do not store admin passwords in shell history or tickets.<\/li>\n<li>Use a secrets manager (OCI Vault Secrets or your enterprise vault) where appropriate.<\/li>\n<li>Rotate credentials and implement least privilege for application schemas.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Audit\/logging<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Enable and review:<\/li>\n<li>OCI Audit for control-plane changes<\/li>\n<li>Database auditing for privileged actions and sensitive tables<\/li>\n<li>Centralize logs per compliance requirements.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Compliance considerations<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Data residency: deploy in correct OCI region.<\/li>\n<li>Access control: enforce MFA, least privilege, and strong joiner\/mover\/leaver processes.<\/li>\n<li>Encryption and retention: align backup retention with legal requirements.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Common security mistakes<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Opening listener ports broadly (0.0.0.0\/0) in security lists.<\/li>\n<li>Using public IPs for admin hosts without tight IP restrictions.<\/li>\n<li>Sharing SYS\/SYSTEM passwords across teams.<\/li>\n<li>No budget alerts \u2192 uncontrolled spend and poor governance signals.<\/li>\n<li>No tested restore procedure.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Secure deployment recommendations<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Private subnets, NSGs, Bastion, hybrid private connectivity.<\/li>\n<li>Use separate compartments and policies per environment.<\/li>\n<li>Enforce tagging and budgets.<\/li>\n<li>Automate baseline configuration and maintain runbooks.<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">13. Limitations and Gotchas<\/h2>\n\n\n\n<p>Because this is a premium managed service, constraints are common. Always validate in official docs for your region.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Known limitations (typical)<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Regional availability<\/strong>: not offered in every region.<\/li>\n<li><strong>Quota constraints<\/strong>: ECPU\/storage allocations limited by tenancy quotas.<\/li>\n<li><strong>Provisioning time<\/strong>: can be long; plan for hours, not minutes.<\/li>\n<li><strong>Networking prerequisites<\/strong>: strict subnet\/DNS\/port requirements can cause provisioning failures.<\/li>\n<li><strong>Feature availability differences<\/strong>: some options differ between Exascale and Dedicated Infrastructure. Verify HA, backup, and scaling details.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Pricing surprises<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Leaving VM clusters running can accumulate large costs.<\/li>\n<li>Backup storage retention can grow quietly.<\/li>\n<li>Data egress and cross-region traffic can add cost.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Compatibility issues<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Certain Oracle Database versions\/options may not be available in all regions or service configurations.<\/li>\n<li>Some enterprise features require additional licensing even if the platform runs them technically (verify with Oracle licensing).<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Operational gotchas<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Maintenance windows and patching: align with release\/maintenance schedules.<\/li>\n<li>Monitoring: OCI metrics are necessary but not sufficient; you still need DB-level visibility for SQL performance.<\/li>\n<li>IAM policy granularity: easy to over-permission if you rely only on <code>database-family<\/code> without scoping.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Migration challenges<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Large data transfers: plan staging, parallelism, and cutover.<\/li>\n<li>Application compatibility: test drivers, TLS settings, and connection descriptors.<\/li>\n<li>DR design: define RTO\/RPO, then implement accordingly.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Vendor-specific nuances<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Oracle Database licensing is complex. BYOL eligibility and compliance must be verified with Oracle or your licensing team.<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">14. Comparison with Alternatives<\/h2>\n\n\n\n<p>Exadata Database Service on Exascale Infrastructure is one option in OCI Data Management and beyond. The best alternative depends on control requirements, workload, and cost constraints.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Comparison table<\/h3>\n\n\n\n<figure class=\"wp-block-table\"><table>\n<thead>\n<tr>\n<th>Option<\/th>\n<th>Best For<\/th>\n<th>Strengths<\/th>\n<th>Weaknesses<\/th>\n<th>When to Choose<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>Exadata Database Service on Exascale Infrastructure<\/strong> (Oracle Cloud)<\/td>\n<td>Customer-managed Oracle DB needing elastic Exadata platform<\/td>\n<td>Exadata capabilities + elastic allocation; OCI-managed infrastructure; private VCN integration<\/td>\n<td>Premium cost; region\/limit constraints; still DBA-heavy<\/td>\n<td>When you need Oracle DB control + Exadata performance with more elasticity<\/td>\n<\/tr>\n<tr>\n<td><strong>Exadata Database Service on Dedicated Infrastructure<\/strong> (Oracle Cloud)<\/td>\n<td>Stable, high, predictable capacity needs<\/td>\n<td>Dedicated capacity; strong isolation<\/td>\n<td>Less elastic; may require larger baseline commitment<\/td>\n<td>When you want dedicated infrastructure behavior and capacity predictability<\/td>\n<\/tr>\n<tr>\n<td><strong>Oracle Autonomous Database<\/strong> (Oracle Cloud)<\/td>\n<td>Teams wanting minimal DBA work<\/td>\n<td>Automated patching\/tuning; fast provisioning; strong managed experience<\/td>\n<td>Less control over instance-level configuration; some features differ<\/td>\n<td>When operational simplicity matters more than deep DBA control<\/td>\n<\/tr>\n<tr>\n<td><strong>Base Database Service (VM\/Bare Metal)<\/strong> (Oracle Cloud)<\/td>\n<td>Smaller Oracle workloads, cost-sensitive dev\/test<\/td>\n<td>Lower cost than Exadata; flexible compute shapes<\/td>\n<td>Not Exadata; may not match performance\/IO patterns<\/td>\n<td>When you don\u2019t need Exadata and want simpler economics<\/td>\n<\/tr>\n<tr>\n<td><strong>OCI MySQL HeatWave<\/strong> (Oracle Cloud)<\/td>\n<td>MySQL workloads, analytics acceleration<\/td>\n<td>Managed MySQL + HeatWave; good for MySQL ecosystems<\/td>\n<td>Not Oracle Database; migration required<\/td>\n<td>When app can use MySQL and you want managed analytics<\/td>\n<\/tr>\n<tr>\n<td><strong>Amazon RDS for Oracle \/ Azure Oracle options<\/strong> (other clouds)<\/td>\n<td>Oracle DB in other hyperscalers<\/td>\n<td>Managed DB options integrated with those clouds<\/td>\n<td>Service feature parity varies; performance differs from Exadata<\/td>\n<td>When your org standardizes on AWS\/Azure and accepts their Oracle offerings<\/td>\n<\/tr>\n<tr>\n<td><strong>Self-managed Oracle on VMs<\/strong> (any cloud)<\/td>\n<td>Maximum OS-level control<\/td>\n<td>Full control of OS and DB<\/td>\n<td>Highest ops burden; patching, HA, backups are on you<\/td>\n<td>When you need complete control and accept operational overhead<\/td>\n<\/tr>\n<tr>\n<td><strong>PostgreSQL (managed)<\/strong><\/td>\n<td>Modern apps without Oracle dependency<\/td>\n<td>Lower cost; open ecosystem<\/td>\n<td>Migration complexity; feature differences<\/td>\n<td>When rewriting\/migrating away from Oracle is feasible<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/figure>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">15. Real-World Example<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Enterprise example: Global retailer modernizing Oracle estate<\/h3>\n\n\n\n<p><strong>Problem<\/strong><br\/>\nA global retailer has:\n&#8211; an on-prem Oracle Database estate with mixed OLTP and analytics\n&#8211; seasonal peaks (holiday shopping)\n&#8211; strict compliance and audit requirements\n&#8211; pressure to reduce data center footprint<\/p>\n\n\n\n<p><strong>Proposed architecture<\/strong>\n&#8211; OCI region deployment in required geography\n&#8211; Hub-and-spoke network:\n  &#8211; DRG connected to on-prem via FastConnect\n  &#8211; centralized inspection (optional firewall)\n&#8211; Exadata Database Service on Exascale Infrastructure for core Oracle workloads\n&#8211; App tier moved to OCI compute\/OKE in private subnets\n&#8211; Monitoring and alarms integrated into on-call\n&#8211; OCI Audit exported\/retained per compliance policy\n&#8211; Backup strategy using supported Oracle tools and OCI storage (verify exact best practice for Exascale)<\/p>\n\n\n\n<p><strong>Why this service was chosen<\/strong>\n&#8211; Exadata-class performance for mixed workload\n&#8211; Elastic scaling for seasonal peaks\n&#8211; OCI-managed infrastructure reduces hardware ops burden\n&#8211; Maintains DBA control for complex schema\/tuning needs<\/p>\n\n\n\n<p><strong>Expected outcomes<\/strong>\n&#8211; Reduced overprovisioning vs fixed capacity\n&#8211; Improved operational consistency and auditability\n&#8211; Faster response to seasonal peaks by scaling resources\n&#8211; A clear path to data center exit for the database tier<\/p>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<h3 class=\"wp-block-heading\">Startup\/small-team example: SaaS provider with enterprise customers<\/h3>\n\n\n\n<p><strong>Problem<\/strong><br\/>\nA SaaS provider serves mid-market and enterprise customers who require Oracle Database for integration compatibility and procurement reasons. The startup needs:\n&#8211; strong performance and reliability\n&#8211; quick scaling as tenants onboard\n&#8211; minimal infrastructure team overhead<\/p>\n\n\n\n<p><strong>Proposed architecture<\/strong>\n&#8211; Single OCI region initially\n&#8211; Private VCN with strict NSGs\n&#8211; Exadata Database Service on Exascale Infrastructure as the multi-tenant database platform\n&#8211; CI\/CD deploys schema changes with strict change control\n&#8211; Budgets + cost tags per tenant\/environment\n&#8211; Optional DR planned once revenue justifies it<\/p>\n\n\n\n<p><strong>Why this service was chosen<\/strong>\n&#8211; Meets enterprise expectations for Oracle Database + performance\n&#8211; Elastic model helps control early-stage costs compared with dedicated, fixed allocations\n&#8211; Keeps database administration control in-house<\/p>\n\n\n\n<p><strong>Expected outcomes<\/strong>\n&#8211; Faster onboarding of enterprise tenants\n&#8211; Ability to scale compute during customer migrations and peak usage\n&#8211; Stronger security posture via private endpoints and least privilege IAM<\/p>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">16. FAQ<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>\n<p><strong>Is Exadata Database Service on Exascale Infrastructure the same as Autonomous Database?<\/strong><br\/>\n   No. Autonomous Database is Oracle-managed for many database lifecycle tasks. Exadata Database Service on Exascale Infrastructure is customer-managed Oracle Database running on Exadata, giving you more DBA control.<\/p>\n<\/li>\n<li>\n<p><strong>Is this service available in every OCI region?<\/strong><br\/>\n   No. Availability varies by region. Verify in the OCI Console and official region availability documentation.<\/p>\n<\/li>\n<li>\n<p><strong>Do I get a public endpoint for the database?<\/strong><br\/>\n   Typically you should use private endpoints in your VCN. Public exposure is not recommended and may not be supported in the same way. Verify connectivity options in official docs.<\/p>\n<\/li>\n<li>\n<p><strong>What\u2019s the difference between Exascale and Dedicated Infrastructure?<\/strong><br\/>\n   Exascale focuses on more elastic, consumption-oriented allocation. Dedicated Infrastructure typically implies more fixed\/dedicated capacity. Exact behavior depends on OCI\u2019s current implementation\u2014verify in docs.<\/p>\n<\/li>\n<li>\n<p><strong>Can I use BYOL (Bring Your Own License)?<\/strong><br\/>\n   Often yes, but eligibility depends on your Oracle license agreements and OCI rules. Confirm with official pricing and your licensing team.<\/p>\n<\/li>\n<li>\n<p><strong>How do backups work?<\/strong><br\/>\n   Backups are typically implemented using Oracle Database backup tools and OCI-supported mechanisms. Exact supported workflows vary\u2014verify the Exascale service documentation.<\/p>\n<\/li>\n<li>\n<p><strong>Can I connect from on-premises?<\/strong><br\/>\n   Yes, typically via DRG + FastConnect or IPSec VPN into your VCN. Ensure routes, DNS, and security rules are configured.<\/p>\n<\/li>\n<li>\n<p><strong>What tools do DBAs use day-to-day?<\/strong><br\/>\n   Standard Oracle tools: SQL*Plus\/SQLcl, RMAN, and performance tools appropriate to your licensing. OCI adds infrastructure-level lifecycle controls and monitoring.<\/p>\n<\/li>\n<li>\n<p><strong>How do I control who can delete the database?<\/strong><br\/>\n   Use OCI IAM policies scoped to compartments, plus organizational controls (approval workflows). Enable OCI Audit review.<\/p>\n<\/li>\n<li>\n<p><strong>How do I monitor performance?<\/strong><br\/>\n   Use OCI Monitoring for cloud resource metrics plus Oracle database performance diagnostics (AWR\/ASH\/SQL monitoring depending on licensing and configuration\u2014verify).<\/p>\n<\/li>\n<li>\n<p><strong>Can I scale resources up and down automatically?<\/strong><br\/>\n   The service supports elastic allocation, but automation specifics depend on available APIs\/metrics and your runbooks. Verify autoscaling support patterns for Exascale.<\/p>\n<\/li>\n<li>\n<p><strong>What are the most common provisioning failures?<\/strong><br\/>\n   Insufficient quota, unsupported region, and networking misconfiguration (subnet\/DNS\/NSG rules). Check work requests for details.<\/p>\n<\/li>\n<li>\n<p><strong>Is data encrypted by default?<\/strong><br\/>\n   Encryption is typically available and commonly enabled, but defaults and key management options vary. Verify in documentation for your configuration.<\/p>\n<\/li>\n<li>\n<p><strong>What\u2019s the recommended way to access the database for admin tasks?<\/strong><br\/>\n   Use a private admin host + OCI Bastion, or a corporate network path via FastConnect\/VPN. Avoid public exposure.<\/p>\n<\/li>\n<li>\n<p><strong>Is this service suitable for small dev\/test databases?<\/strong><br\/>\n   Sometimes, but it may be cost-prohibitive. Consider Base Database Service or Autonomous Database for smaller workloads unless Exadata-specific needs exist.<\/p>\n<\/li>\n<li>\n<p><strong>Can I use Terraform to provision this service?<\/strong><br\/>\n   OCI Terraform provider coverage evolves. Verify whether Exascale infrastructure resources and VM clusters are supported in the provider version you use.<\/p>\n<\/li>\n<li>\n<p><strong>How do I estimate cost without exact pricing numbers?<\/strong><br\/>\n   Use OCI Cost Estimator and the official price list; model compute allocation hours, storage, license model, and backup retention.<\/p>\n<\/li>\n<\/ol>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">17. Top Online Resources to Learn Exadata Database Service on Exascale Infrastructure<\/h2>\n\n\n\n<figure class=\"wp-block-table\"><table>\n<thead>\n<tr>\n<th>Resource Type<\/th>\n<th>Name<\/th>\n<th>Why It Is Useful<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Official documentation<\/td>\n<td>OCI Exadata Database Service docs<\/td>\n<td>Primary reference for concepts, provisioning, networking, operations: https:\/\/docs.oracle.com\/en-us\/iaas\/exadata\/<\/td>\n<\/tr>\n<tr>\n<td>Official documentation<\/td>\n<td>OCI Database documentation landing<\/td>\n<td>Broader OCI database services context: https:\/\/docs.oracle.com\/en-us\/iaas\/Content\/Database\/home.htm<\/td>\n<\/tr>\n<tr>\n<td>Official pricing<\/td>\n<td>Oracle Cloud Pricing<\/td>\n<td>Official pricing entry point: https:\/\/www.oracle.com\/cloud\/pricing\/<\/td>\n<\/tr>\n<tr>\n<td>Official pricing<\/td>\n<td>Oracle Cloud Price List<\/td>\n<td>SKU-level pricing reference (verify Exascale SKUs): https:\/\/www.oracle.com\/cloud\/price-list\/<\/td>\n<\/tr>\n<tr>\n<td>Cost estimating<\/td>\n<td>OCI Cost Estimator<\/td>\n<td>Model region\/SKU usage and compare options: https:\/\/www.oracle.com\/cloud\/costestimator.html<\/td>\n<\/tr>\n<tr>\n<td>Official IAM docs<\/td>\n<td>OCI IAM Policies<\/td>\n<td>Correct policy syntax and best practices: https:\/\/docs.oracle.com\/en-us\/iaas\/Content\/Identity\/Concepts\/policies.htm<\/td>\n<\/tr>\n<tr>\n<td>Official networking docs<\/td>\n<td>OCI Networking overview<\/td>\n<td>VCN, subnets, NSGs, DRG patterns: https:\/\/docs.oracle.com\/en-us\/iaas\/Content\/Network\/Concepts\/overview.htm<\/td>\n<\/tr>\n<tr>\n<td>Official observability docs<\/td>\n<td>OCI Monitoring<\/td>\n<td>Metrics, alarms, notifications: https:\/\/docs.oracle.com\/en-us\/iaas\/Content\/Monitoring\/home.htm<\/td>\n<\/tr>\n<tr>\n<td>Official audit docs<\/td>\n<td>OCI Audit<\/td>\n<td>Audit events and governance: https:\/\/docs.oracle.com\/en-us\/iaas\/Content\/Audit\/home.htm<\/td>\n<\/tr>\n<tr>\n<td>Tutorials\/labs (official)<\/td>\n<td>Oracle Cloud Tutorials<\/td>\n<td>Hands-on labs across OCI (search Exadata topics): https:\/\/docs.oracle.com\/en\/learn\/<\/td>\n<\/tr>\n<tr>\n<td>Videos (official)<\/td>\n<td>Oracle Cloud YouTube channel<\/td>\n<td>Product updates and walkthroughs (verify Exascale content): https:\/\/www.youtube.com\/@OracleCloudInfrastructure<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/figure>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">18. Training and Certification Providers<\/h2>\n\n\n\n<figure class=\"wp-block-table\"><table>\n<thead>\n<tr>\n<th>Institute<\/th>\n<th>Suitable Audience<\/th>\n<th>Likely Learning Focus<\/th>\n<th>Mode<\/th>\n<th>Website URL<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>DevOpsSchool.com<\/td>\n<td>DevOps engineers, SREs, platform teams<\/td>\n<td>DevOps\/cloud operations foundations; may include OCI tooling<\/td>\n<td>Check website<\/td>\n<td>https:\/\/www.devopsschool.com\/<\/td>\n<\/tr>\n<tr>\n<td>ScmGalaxy.com<\/td>\n<td>Beginners to intermediate engineers<\/td>\n<td>SCM\/DevOps process and tooling; may complement OCI operations<\/td>\n<td>Check website<\/td>\n<td>https:\/\/www.scmgalaxy.com\/<\/td>\n<\/tr>\n<tr>\n<td>CLoudOpsNow.in<\/td>\n<td>Cloud operations practitioners<\/td>\n<td>CloudOps practices, monitoring, cost governance<\/td>\n<td>Check website<\/td>\n<td>https:\/\/www.cloudopsnow.in\/<\/td>\n<\/tr>\n<tr>\n<td>SreSchool.com<\/td>\n<td>SREs and operations teams<\/td>\n<td>Reliability engineering practices, incident response, SLIs\/SLOs<\/td>\n<td>Check website<\/td>\n<td>https:\/\/www.sreschool.com\/<\/td>\n<\/tr>\n<tr>\n<td>AiOpsSchool.com<\/td>\n<td>Ops and platform teams<\/td>\n<td>AIOps concepts, automation, observability<\/td>\n<td>Check website<\/td>\n<td>https:\/\/www.aiopsschool.com\/<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/figure>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">19. Top Trainers<\/h2>\n\n\n\n<figure class=\"wp-block-table\"><table>\n<thead>\n<tr>\n<th>Platform\/Site<\/th>\n<th>Likely Specialization<\/th>\n<th>Suitable Audience<\/th>\n<th>Website URL<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>RajeshKumar.xyz<\/td>\n<td>DevOps\/cloud training content<\/td>\n<td>Engineers seeking practical training resources<\/td>\n<td>https:\/\/rajeshkumar.xyz\/<\/td>\n<\/tr>\n<tr>\n<td>devopstrainer.in<\/td>\n<td>DevOps training<\/td>\n<td>Beginners to intermediate DevOps engineers<\/td>\n<td>https:\/\/www.devopstrainer.in\/<\/td>\n<\/tr>\n<tr>\n<td>devopsfreelancer.com<\/td>\n<td>Freelance DevOps services\/training<\/td>\n<td>Teams seeking short-term expert help<\/td>\n<td>https:\/\/www.devopsfreelancer.com\/<\/td>\n<\/tr>\n<tr>\n<td>devopssupport.in<\/td>\n<td>DevOps support resources<\/td>\n<td>Ops teams needing ongoing support guidance<\/td>\n<td>https:\/\/www.devopssupport.in\/<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/figure>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">20. Top Consulting Companies<\/h2>\n\n\n\n<figure class=\"wp-block-table\"><table>\n<thead>\n<tr>\n<th>Company<\/th>\n<th>Likely Service Area<\/th>\n<th>Where They May Help<\/th>\n<th>Consulting Use Case Examples<\/th>\n<th>Website URL<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>cotocus.com<\/td>\n<td>Cloud\/DevOps consulting<\/td>\n<td>Cloud adoption, automation, operations<\/td>\n<td>Landing zone design, CI\/CD, monitoring, migration planning<\/td>\n<td>https:\/\/cotocus.com\/<\/td>\n<\/tr>\n<tr>\n<td>DevOpsSchool.com<\/td>\n<td>DevOps consulting and training<\/td>\n<td>DevOps transformation and enablement<\/td>\n<td>DevOps process setup, toolchain implementation, skills training<\/td>\n<td>https:\/\/www.devopsschool.com\/<\/td>\n<\/tr>\n<tr>\n<td>DEVOPSCONSULTING.IN<\/td>\n<td>DevOps consulting<\/td>\n<td>Delivery pipelines, infra automation<\/td>\n<td>IaC adoption, operational maturity improvements<\/td>\n<td>https:\/\/www.devopsconsulting.in\/<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/figure>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">21. Career and Learning Roadmap<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">What to learn before this service<\/h3>\n\n\n\n<p>To be effective with Exadata Database Service on Exascale Infrastructure, learn:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>\n<p><strong>OCI foundations<\/strong>\n   &#8211; Compartments, IAM, policies\n   &#8211; VCN basics: subnets, NSGs, route tables, DRG\n   &#8211; OCI Monitoring, Logging, Audit<\/p>\n<\/li>\n<li>\n<p><strong>Oracle Database fundamentals<\/strong>\n   &#8211; Architecture basics (SGA\/PGA, redo\/undo, datafiles)\n   &#8211; SQL performance and indexing\n   &#8211; Backup\/restore concepts (RMAN fundamentals)<\/p>\n<\/li>\n<li>\n<p><strong>Operational fundamentals<\/strong>\n   &#8211; Change management, incident response\n   &#8211; Cost governance (budgets, tagging)\n   &#8211; Security basics (least privilege, network segmentation)<\/p>\n<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\">What to learn after this service<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Advanced Oracle performance tuning (wait events, execution plans)<\/li>\n<li>High availability and DR patterns (RAC, Data Guard\u2014verify service support)<\/li>\n<li>Automation:<\/li>\n<li>OCI CLI and SDKs<\/li>\n<li>Terraform for OCI (verify Exascale resource support)<\/li>\n<li>Observability maturity:<\/li>\n<li>alert thresholds<\/li>\n<li>capacity management<\/li>\n<li>SLOs and error budgets<\/li>\n<li>Migration tooling:<\/li>\n<li>Data Pump, RMAN duplication, GoldenGate (licensing-dependent)<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Job roles that use it<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Oracle DBA (cloud)<\/li>\n<li>Cloud database engineer<\/li>\n<li>Platform engineer (data platforms)<\/li>\n<li>Site Reliability Engineer (database platforms)<\/li>\n<li>Cloud solutions architect (Data Management)<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Certification path (if available)<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Oracle offers OCI certifications and database certifications. The exact mapping to Exascale changes over time.<br\/>\n  Start with official certification listings and verify current tracks: https:\/\/education.oracle.com\/<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Project ideas for practice<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Build a secure private DB platform blueprint (VCN + NSGs + Bastion + policies).<\/li>\n<li>Implement budget alerts and tag-based cost reports for database environments.<\/li>\n<li>Perform a migration POC from a small on-prem Oracle DB to OCI using Data Pump (where licensed and appropriate).<\/li>\n<li>Create an operational runbook: provisioning \u2192 monitoring \u2192 backup verification \u2192 restore test.<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">22. Glossary<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>OCI (Oracle Cloud Infrastructure):<\/strong> Oracle Cloud platform for compute, networking, storage, and managed services.<\/li>\n<li><strong>Data Management:<\/strong> Cloud category covering databases, analytics, data integration, and governance services.<\/li>\n<li><strong>Exadata:<\/strong> Oracle\u2019s engineered system optimized for Oracle Database workloads (compute + storage architecture).<\/li>\n<li><strong>Exascale Infrastructure:<\/strong> OCI infrastructure model for Exadata with elastic\/consumption-oriented allocation (verify exact behavior in docs).<\/li>\n<li><strong>VM Cluster:<\/strong> Logical cluster layer where database compute is allocated and databases run.<\/li>\n<li><strong>Database Home:<\/strong> Oracle software installation home used to create and manage databases.<\/li>\n<li><strong>VCN:<\/strong> Virtual Cloud Network, OCI\u2019s private network construct.<\/li>\n<li><strong>Subnet:<\/strong> IP range segment inside a VCN, can be public or private.<\/li>\n<li><strong>NSG:<\/strong> Network Security Group; virtual firewall rules applied to VNICs\/resources.<\/li>\n<li><strong>DRG:<\/strong> Dynamic Routing Gateway; connects VCNs to on-prem or other networks.<\/li>\n<li><strong>FastConnect:<\/strong> Dedicated private connectivity to OCI.<\/li>\n<li><strong>IPSec VPN:<\/strong> Encrypted tunnel connectivity to OCI over the internet.<\/li>\n<li><strong>TCPS:<\/strong> TLS-encrypted Oracle Net protocol.<\/li>\n<li><strong>IAM Policy:<\/strong> Text rules controlling permissions in OCI.<\/li>\n<li><strong>Compartment:<\/strong> OCI logical isolation boundary for resources and policies.<\/li>\n<li><strong>OCI Audit:<\/strong> Service recording API\/console actions in OCI.<\/li>\n<li><strong>OCI Monitoring:<\/strong> Metrics and alarms service.<\/li>\n<li><strong>BYOL:<\/strong> Bring Your Own License (Oracle licensing model).<\/li>\n<li><strong>License Included:<\/strong> OCI pricing model where license cost is bundled.<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">23. Summary<\/h2>\n\n\n\n<p><strong>Exadata Database Service on Exascale Infrastructure<\/strong> in <strong>Oracle Cloud<\/strong> is a <strong>Data Management<\/strong> service for running <strong>customer-managed Oracle Database<\/strong> workloads on Exadata with a more elastic, consumption-oriented infrastructure model. It fits best when you need Oracle Database control, enterprise-grade private networking, and Exadata-class performance while offloading underlying infrastructure operations to Oracle.<\/p>\n\n\n\n<p>From a <strong>cost<\/strong> perspective, the main drivers are compute allocation hours, storage, licensing model (BYOL vs License Included), backup retention, and data egress\u2014use the official pricing pages and OCI Cost Estimator rather than static numbers. From a <strong>security<\/strong> perspective, private networking, least-privilege IAM, strong auditing, and careful secrets handling are foundational.<\/p>\n\n\n\n<p>Use it when your workload is performance-sensitive, mission-critical, and Oracle Database\u2013dependent\u2014and when your organization is ready to operate Oracle Database responsibly in the cloud. Next step: follow the official OCI Exadata documentation for Exascale-specific networking and provisioning details, then run a controlled proof of concept using budgets, tags, and a strict cleanup plan.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Data Management<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[68,62],"tags":[],"class_list":["post-890","post","type-post","status-publish","format-standard","hentry","category-data-management","category-oracle-cloud"],"_links":{"self":[{"href":"https:\/\/www.devopsschool.com\/tutorials\/wp-json\/wp\/v2\/posts\/890","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.devopsschool.com\/tutorials\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.devopsschool.com\/tutorials\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.devopsschool.com\/tutorials\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.devopsschool.com\/tutorials\/wp-json\/wp\/v2\/comments?post=890"}],"version-history":[{"count":0,"href":"https:\/\/www.devopsschool.com\/tutorials\/wp-json\/wp\/v2\/posts\/890\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.devopsschool.com\/tutorials\/wp-json\/wp\/v2\/media?parent=890"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.devopsschool.com\/tutorials\/wp-json\/wp\/v2\/categories?post=890"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.devopsschool.com\/tutorials\/wp-json\/wp\/v2\/tags?post=890"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}