CloudRuler for Oracle Cloud

Every OCI tenancy and compartment, governed end to end.

All six modules run on OCI today: inventory and topology, FinOps with budgets and anomalies, OCI Audit, IAM posture, VCN Flow Log traffic and server audit.

Connects to

  • One or more OCI tenancies
  • Every compartment and subscribed region
  • OCI Audit and cost reports
  • VCN Flow Logs
  • The OCI Unified Monitoring Agent, for server audit

What it needs

  • Read-only IAM policies in each tenancy
  • VCN Flow Logs enabled for traffic audit
  • The Unified Monitoring Agent on servers you want to audit. No SSH access.

What you see

  • Compute, DB systems, storage, VCNs and load balancers by landscape
  • Network, instance, load balancer and database maps
  • Cost, budgets, anomalies and Oracle subscriptions
  • Who did what, what talked to what, and who ran what on the servers

Topology + traffic

Hub-and-spoke through the DRG, and what actually flowed.

VCNs with nested subnets and gateways, route tables resolved to real targets, DB systems down to pluggable databases and RAC clusters, next to the traffic VCN Flow Logs actually recorded.

Illustration: an OCI multi-VCN network map, with a hub VCN connected through a Dynamic Routing Gateway to production and non-production spoke VCNs. hub-vcn10.0.0.0/16 IGW public-sn · 10.0.1.0/24 lb-prod · listener :443cert *.example.com · 61 days left bastion-01 firewall-sn · 10.0.2.0/24 nfw-01 route table: 10.1.0.0/16 → DRG route table: 10.2.0.0/16 → DRG route table: 0.0.0.0/0 → IGW DRGhub-drg prod-vcn10.1.0.0/16 app-sn · 10.1.1.0/24 app-01 app-02 db-sn · 10.1.2.0/24 erp-db · DB system · RAC nonprod-vcn10.2.0.0/16 app-sn · 10.2.1.0/24 test-app-01 db-sn · 10.2.2.0/24 erp-test-db NAT attach attach

Illustration with sample names. Every box in CloudRuler is clickable and opens that resource’s full details.

Illustration: a resource connections graph built from flow logs. A server, app-01, sits in the centre, with lines to every peer it talked to, including ports and volumes. One inbound SSH connection from an address on a public threat blocklist is highlighted in red. app-01 10.1.1.12 lb-prod inbound :8080 · 2.1 GB erp-db outbound :1521 · 840 MB Object Storage outbound :443 · 310 MB 10.2.0.0/16 internal :8080 · 95 MB ⚠ 203.0.113.47 inbound :22 · blocklist match Internet outbound :443 · 12 MB

Illustration with sample data. Built from VCN Flow Logs. Traffic matched against public threat blocklists is highlighted.

Running Oracle Fusion or Oracle Integration Cloud too? See Oracle Fusion & OIC →

See CloudRuler on your OCI tenancies.

A 30-minute walkthrough on Oracle Cloud, AWS, or both. Bring your questions about inventory, cost or audit.