OCI Microsegmentation with NSGs

Hello everyone, my name is Shawn Moore. I'm a Principal Cloud Network Architect on the OCI North America Shared Security and Network Services team.

In this video, I’ll show how to apply Microsegmentation with the use of network security groups.

Network security group rules function the same as security list rules. However, you can specify another Network Security Group as the rule's source or destination address instead of an IP CIDR. You can easily write security rules to control traffic between NSGs.

For this demo we’ll use a multi-tier design with one VCN and three separate subnets. Each subnet is considered a different tier.

We’ll use Network Security Groups, also known as NSGs to provide Microsegmentation between the Web, App, and Database tiers.

----------------------------------------------
Copyright © 2023, Oracle and/or its affiliates.