Adding a Service CIDR Label to a Service Gateway
Add a specified service CIDR label to the service gateway.
Because Object Storage is covered by both OCI <region> Object Storage and All <region> Services in Oracle Services Network, a service gateway can use only one of those service CIDR labels. Likewise, a route table can have a single rule for one of the service CIDR labels. It cannot have two separate rules, one for each label.
If the service gateway is configured to use All <region> Services in Oracle Services Network, the route rule can use either CIDR label. However, if the service gateway is configured to use OCI <region> Object Storage and the route rule uses All <region> Services in Oracle Services Network, traffic to services in the Oracle Services Network except Object Storage will be blackholed. The Console prohibits you from configuring the service gateway and corresponding route table in that manner.
If you want to switch the service gateway to use a different service CIDR label, see When You Switch to a Different Service CIDR Label.
- In the Console, confirm you're viewing the compartment that contains the VCN with the service gateway that you're interested in. For information about compartments and access control, see Access Control.
- Open the navigation menu, click Networking, and then click Virtual cloud networks.
- Click the name of the VCN that has the service gateway that you're interested in.
- Under Resources, click Service Gateways.
-
For the service gateway that you're interested in, click the Actions menu (
), and then select
Edit.
- In the Services: field, add the appropriate service CIDR label. Without a service CIDR label enabled for the gateway, no traffic flows through it.
- Click Save changes.
What's Next
- Update route tables for any subnets that need to access the service gateway. See instructions in Task 2: Update routing for the subnet.
- Update relevant security rules. See instructions in Task 3: (Optional) Update security rules.
Use the network service-gateway attach command and required parameters to add a service CIDR label to a service gateway:
oci network service-gateway attach --service-gateway-id sgw-ocid --service-id service-ocid ... [OPTIONS]For a complete list of parameters and values for CLI commands, see the CLI Command Reference.
: Run the AttachServiceId operation to add a service CIDR label to a service gateway.
Use ListServices to determine the available service CIDR labels. GetService: Gets the details for a particular service CIDR label.