Oracle Cloud ISV Welcome Kit

Package, Deploy and Promote your Applications on

Oracle Cloud Platform and Infrastructure

V 1 . 0 F E B R U A R Y 2 0 1 8

1 ISV WELCOME KIT

Table of Contents

Oracle Cloud Platform and Infrastructure services 2

Oracle Cloud Infrastructure Key Concepts 3

1 - Getting Started: Application Deployment 3

Deploying an Application on Oracle Cloud 3

2 - Migration 5

Discover/Map/Integrate 6

Migration Connectivity Options 9

Migration Methods 9

3 - Monitoring & Management 9

4 - Backup and Disaster Recovery in the Cloud 12

Backup in the Oracle Cloud 12

High Availability in Oracle Cloud Infrastructure 13

Backing-up and Exadata Database in OCI 14

Bring Your Own Image Scenarios 18

6 - Promoting 22

Listing Applications on the Oracle Cloud Marketplace 22

Press Releases 24

Participation in other OPN initiatives 24

Other Marketing Resources 24

2 ISV WELCOME KIT

W H Y M O V E T O T H E O R A C L E C L O U D ?

Oracle Cloud is not only the lowest

cost and most automated, but it's

the industry's broadest and most

integrated cloud, with deployment

options ranging from the public

cloud to your data center. Oracle

Cloud offers best-in-class services

across Software as a Service

(SaaS), Data as a Service (DaaS),

Platform as a Service (PaaS), and

Infrastructure as a Service (IaaS).

Oracle Cloud helps organizations

drive innovation and business

transformation by increasing agility

and reducing IT complexity.

» GET STARTED

Oracle Cloud provides a comprehensive set of integrated, subscription-based Platform

as a Service (PaaS) and Infrastructure services that enable businesses to run any

workload in an enterprise-grade cloud managed, hosted, and supported by Oracle. As

Oracle’s customer move-to and adopt the cloud this transition provides an opportunity

for Oracle Partners and Independent Software Vendors (ISVs) to be part of this

journey, by deploying and migrating applications and services, running on the Oracle

Cloud.

This “Oracle Cloud ISV Welcome Kit” overview outlines the primary steps concepts and

steps to Package, Run and Promote applications that support applications that can be

deployed on the Oracle Cloud platform and infrastructure servces.

Oracle Cloud Platform and Infrastructure services

The Oracle Cloud Infrastructure and Platform Services provides a complete platform for

deploying and migrating traditional Enterprise Applications and for building and running

modern Cloud Native solutions.

To support application deployment, the Oracle’s Cloud services include:

» Compute, Networking and Storage - Flexibility to scale your most demanding

workloads, on a private cloud network you define, with highly durable cloud storage

to protect and serve your mission-critical data

» Database and Database Backup - Enterprise-proven database cloud service that

supports any size workload from dev/test to large-scale production deployment.

» Application and Container platforms - Build, deploy, operate container-native, java,

and polyglot applications

Application Deployment

MigrationMonitoring & Management

Backup and Disaster Recovery

Deployment & Delivery Models

Promoting

3 ISV WELCOME KIT

Oracle Cloud Infrastructure Key Concepts

Before getting to the details of deploying and managing applications on the Oracle Cloud

Infrastructure, it is important to understand some of the key concepts and terminology

used for Oracle Cloud deployments:

» Tenancy – A customer specific, secure and isolated, partition within Oracle Cloud

Infrastructure where you can create, organize, and administer cloud resources

» Regions and Availability Domains - A region is a localized geographic area, and

an Availability Domain is one or more data centers located within a region, are

isolated from each other, fault tolerant, and very unlikely to fail simultaneously

» Compartments - a logical grouping of resources (such as instances, virtual cloud

networks, block volumes) that can be accessed only by designated groups of users

within a tenancy.

» Security - Enterprises need scalable hybrid cloud solutions that meet all their

security, data protection, and compliance requirements. To meet this need, Oracle

developed the Oracle Cloud Infrastructure, which offers customers a virtual data

center in the cloud that allows enterprises to have complete control with unmatched

security. More details in the public Security White Paper.

The general Oracle Cloud Infrastructure Welcome guide provides more complete

coverage of these and other topics.

1 - Getting Started: Application Deployment

Deploying an Application on Oracle Cloud

Getting started with Oracle Cloud is simple. If you don’t already have access to an

Oracle Cloud Account you can sign up at https://cloud.oracle.com/tryit. And Oracle Cloud

account provides access to a complete range of Oracle Cloud PaaS and IaaS services.

For this initial section we’ll focus getting started with the Oracle Cloud Infrastructure

service.

Networking & Security

First step in deploying any application is to setup the appropriate security and networking

dependencies. A Virtual Cloud Network (VCN) is a virtual version of a traditional

network—including subnets, route tables, and gateways—on which your instances run.

You need to set up at least one cloud network before you can launch instances.

A cloud network resides within a single region but can cross multiple Availability

Domains. You can define subnets for a cloud network in different Availability Domains,

but the subnet itself must belong to a single Availability Domain. You can configure the

cloud network with an optional internet gateway to handle public traffic, and an optional

IPSec VPN connection to securely extend to an on-premises or other external network

To create you first VCN in the Oracle Cloud Infrastructure console go to

» Networking > Virtual Cloud Networks > Create Virtual Cloud Network

Using the option to create the VCN plus related resources will automatically sets up a

Virtual Cloud Network with access to the internet. You can set up firewall rules and

4 ISV WELCOME KIT

Security Lists to control ingress and egress traffic to your Instances. All related resources

will be created in the same Compartment as the VCN

Security Rules can be defined to permit (or deny) traffic to the instances within a

specific subnet. When the option for creating related resources is used the Default

security rules will be setup for inbound SSH and outbound internet access.

Launch a DB Instance

The Oracle Cloud provides an unmatched capability, and options, for running and

management Oracle Databases instances in the cloud, whether your application needs a

small virtualized application specific DB instance, Bare Metal hardware for performance,

HA and DR with RAC and DataGuard (discussed later), or the extreme performance of

the Exadata Cloud service. A new database instance can quickly be configured and

deployed using the Oracle Cloud console.

» Database > DB Systems > Launch DB System

5 ISV WELCOME KIT

Launch a Compute Instance

Similarly a Compute instance can be quickly created for running the application tier of an

application.

» Compute > Instances > Launch Instance

After the instance creation has completed the instance can be access using SSH

» ssh opc@<ip_address> -i <path_to_private_ssh_key>

With the database and compute instances running you can proceed with any application

specific steps to install and configure the required application components and

dependencies. Remember to update the instance firewalls rules and the VCN security

rules to enable traffic for any application specific ports.

2 - Migration

Many businesses and partners are looking for opportunities to migrate their services

and/or applications to the cloud to allow them to either improve their time to market or cut

costs down, sometimes both. As part of their digital transformation efforts, businesses

are overwhelmingly moving towards some cloud approach so modernizing applications

involves taking advantage of the scalability and rich set of services available in the public

Cloud.

Having said that, this blog focused on helping partners to migrate their on-premises

applications (i.e.; Oracle database, on-premises Oss, applications) to Oracle Cloud

infrastructure along with some additional details for integration processes as well.

Below is a high-level overview of the Cloud Migration Process

Cloud Migration Process Discover/Map/Integrate BYOI/VM Migration Database Migration

6 ISV WELCOME KIT

Discover/Map/Integrate

In this phase partners need to understand how to integrate their applications with Oracle

Cloud. Initially all the required application functionalities need to be mapped to an Oracle

Cloud API capability and the following documents that will assist you with that process.

» Oracle Cloud Infrastructure APIs

» Oracle Cloud Infrastructure Documentation

Once the required APIs are identified and mapped then the next step is integrating them

with Oracle Cloud Infrastructure. Oracle Cloud Infrastructure provides the following

SDKs and Other Tools that can be used during this phase.

» Java SDK

» Python SDK

» Ruby SDK

» Data Transfer Utility

» Chef Knife Plugin

» Hadoop Distributed File System (HDFS) for Object Storage

» Terraform Provider

See these related topics:

» Required Keys and OCIDs

» SDK and Tool Configuration

» API Errors

BYOI – Bring Your Own Image

After the integration is complete, next step is moving the on-premise OS to the cloud.

The Oracle Cloud Infrastructure enables you to bring versions of operating system (OS)

to the cloud as long as the underlying hardware supports it. More details can be found

on-line. The services do not depend on the OS you run. The Bring Your Own

Image (BYOI) feature:

» Enables lift-and-shift cloud migration projects.

» Supports both older and cutting edge operating systems.

» Encourages experimentation.

» Increases infrastructure flexibility.

Licensing Requirements

You must comply with all licensing requirements when you upload and start instances

based on OS images you supply.

Bring Your Own Image Scenarios

The Bring Your Own Image scenarios supported in Oracle Cloud Infrastructure include

scenarios based on new operating system images and scenarios based on existing

operating system images.

7 ISV WELCOME KIT

Building new operating system images

» Oracle-provided images: Oracle provides several pre-built images for Oracle

Linux, Microsoft Windows, Ubuntu and CentOS. For the complete list of images,

see Oracle-Provided Images.

» RHEL 7.4 images: You can build new RHEL 7.4 images for bare metal and VM

instances using a terraform template, see Terraform Provider for RHEL 7.4.

Bringing existing operating system images

» Importing custom images for emulation mode: You can import existing operating

system images using either the VMDK or QCOW2 formats, to run in emulation mode

VMs. For more information, see Bring Your Own Custom Images for Emulation

Mode Virtual Machines.

» Bring Your Own KVM: You can bring your own operating system images or older

operating systems such as Ubuntu 6.x, RHEL 3.x, CentOS 5.4 using KVM on bare

metal instances. For more information, see Installing and Configuring KVM on Bare

Metal Instances with Multi-VNIC.

» Bring Your Own OVM: You can bring your Oracle VM workload to Oracle Cloud

Infrastructure, for more information, see Installing and Configuring Oracle VM on

Oracle Cloud Infrastructure.

» Bring Your Own VMware VMs – Oracle Ravello allows customers to migrate single

VM and multi-VM (complex) VMWare and Kernel VM Workloads from their premises

to the Public Cloud without requiring any changes. One use case is migrating your

virtual training environment. Migrating the virtual training environments either from

VMware or KVM, allows you to remove any capacity constraints on your training

infrastructure. Using Oracle Ravello, you can create your training vm labs and spin

up the environments or tear them down as needed. Here are 3 very easy steps:

» 1. Upload your VMware or KVM based VMs to Oracle Ravello.

» 2. Drag and drop them onto Ravello’s application canvas, to create the

application environments and check the networking configuration to see that

Ravello auto-detected it correctly.

» 3. Publish the application, and it will be running and accessible within a few

minutes.

Migrating Databases to the Cloud

Next step is moving your data to the cloud. As explained in the public documentation,

you can migrate your on-premises Oracle Database to an Oracle Cloud Infrastructure

Database service database using a number of different methods that use several

different tools. The method that applies to a given migration scenario depends on several

factors, including the version, character set, and platform endian format of the source

and target databases.

Choosing a Migration Method

Not all migration methods apply to all migration scenarios. Many of

the migration methods apply only if specific characteristics of the source and destination

databases match or are compatible. Moreover, additional factors can affect which

method you choose for your migration from among the methods that are technically

applicable to your migration scenario.

8 ISV WELCOME KIT

Some of the characteristics and factors to consider when choosing a migration method

are:

» On-premises database version

» Database service database version

» On-premises host operating system and version

» On-premises database character set

» Quantity of data, including indexes

» Data types used in the on-premises database

» Storage for data staging

» Acceptable length of system outage

» Network bandwidth

» Destination Platform (Oracle Cloud Infrastructure, Exadata Cloud Services)

To determine which migration methods are applicable to your migration scenario, gather

the following information.

» Database version of your on-premises database:

» Oracle Database 12c Release 2 version 12.2.0.1

» Oracle Database 12c Release 1 version 12.1.0.2 or higher

» Oracle Database 12c Release 1 version lower than 12.1.0.2

» Oracle Database 11g Release 2 version 11.2.0.3 or higher

» Oracle Database 11g Release 2 version lower than 11.2.0.3

» For on-premises Oracle Database 12c Release 2 and Oracle Database 12c Release

1 databases, the architecture of the database:

» Multitenant container database (CDB)

» Non-CDB

» Endian format (byte ordering) of your on-premises database’s host platform

» Some platforms are little endian and others are big endian. Query

V$TRANSPORTABLE_PLATFORM to identify the endian format, and to determine

whether cross-platform tablespace transport is supported.

» The Oracle Cloud Infrastructure Database uses the Linux platform, which is little

endian.

» Database character set of your on-premises database and the Oracle Cloud

Infrastructure Database. Some migration methods require that the source and target

databases use compatible database character sets.

» Database version of the Oracle Cloud Infrastructure Database you are migrating to

» Oracle Database 12c Release 2

» Oracle Database 12c Release 1

» Oracle Database 11g Release 2

» Oracle Database 12c Release 2 and Oracle Database 12c Release 1 databases

created on the Database service use CDB architecture. Databases created using

the Enterprise Edition software edition are single-tenant, and databases created

using the High Performance or Extreme Performance software editions are

multitenant.

After gathering this information, use the “source” and “destination” database versions as

your guide to see which migration methods apply to your migration scenario:

9 ISV WELCOME KIT

• Migrating from Oracle Database 11g to Oracle Database 11g in the Cloud

• Migrating from Oracle Database 11g to Oracle Database 12c in the Cloud

• Migrating from Oracle Database 12c CDB to Oracle Database 12c in the Cloud

• Migrating from Oracle Database 12c Non-CDB to Oracle Database 12c in the Cloud

• Migrating Oracle Databases to Exadata Cloud Service

Migration Connectivity Options

You have several connectivity options when migrating your on-premises databases to

the Oracle Cloud Infrastructure. The options are listed below in order of preference.

» FastConnect: Provides a secure connection between your existing network and

your virtual cloud network (VCN) over a private physical network instead of the

internet. For more information, see FastConnect Overview.

» IPSec VPN: Provides a secure connection between a dynamic routing gateway

(DRG) and customer-premise equipment (CPE), consisting of multiple IPSec

tunnels. The IPSec connection is one of the components forming a site-to-site VPN

between a VCN and your on-premises network. For more information, see IPSec

VPNs.

» Internet gateway: Provides a path for network traffic between your VCN and the

internet. For more information, see Connectivity to the Internet.

Migration Methods

Many methods exist to migrate Oracle databases to the Oracle Cloud Infrastructure

Database service. Which of these methods apply to a given migration scenario depends

on several factors, including the version, character set, and platform endian format of the

source and target databases.

• Data Pump Conventional Export/Import

• Data Pump Full Transportable

• Data Pump Transportable Tablespace

• Remote Cloning a PDB

• Remote Cloning Non-CDB

• RMAN Cross-Platform Transportable PDB

• RMAN Cross-Platform Transportable Tablespace Backup Sets

• RMAN Transportable Tablespace with Data Pump

• RMAN DUPLICATE from an Active Database

• RMAN CONVERT Transportable Tablespace with Data Pump

• SQL Developer and INSERT Statements to Migrate Selected Objects

• SQL Developer and SQL*Loader to Migrate Selected Objects

• Unplugging/Plugging a PDB

• Unplugging/Plugging Non-CDB

3 - Monitoring & Management

Applications are at the core of businesses today. Poor application performance can impact the brand perception in the marketplace and the bottom line.To deliver high-quality applications requires deep visibility into the performance of the applications at all levels. Modern applications execute across a distributed environment in a web browser, across application servers, containers and databases.

10 ISV WELCOME KIT

For management and monitoring, you can use Oracle and non-Oracle third party and open source tools and technologies. The following Oracle tools and technologies can be leveraged:

• Oracle Enterprise Manager

Oracle Enterprise Manager is a traditional active management and deep diagnostics solution, highly tailored for the Oracle red stack – typically used to manage and monitor Oracle Databases, Oracle Middleware and Oracle Applications. Oracle Enterprise Manager can be installed on Oracle Cloud Infrastructure. Oracle Enterprise Manager can be used in conjunction with Oracle Management Cloud (OMC) - the data can be harvested and uploaded to the OMC data platform.

• Oracle Management Cloud (OMC)

Oracle Management Cloud (OMC) is a suite of next-generation integrated monitoring, management, and analytics cloud services that leverage machine learning and big data techniques against the full breadth of the operational data set. OMC’s Unified Platform helps customers improve IT stability, prevent application outages, increase DevOps agility and harden security across their entire application and infrastructure portfolio.

• Oracle Application Performance Monitoring Cloud Service is a software-as-a

service solution that provides deep visibility into your application performance

from end-user experience, through application server requests, and down to

application logs. With Oracle Application Performance Monitoring Cloud

Service, you can isolate problems before they impact your business, break

down the barriers between Development and Operations teams and deliver

better applications.

• Oracle Infrastructure Monitoring Cloud Service monitors the status and health

of your entire IT infrastructure - on-premises or on the cloud -- from a single

platform. Proactive monitoring across tiers enables administrators to be alerted

on issues, troubleshoot and resolve these before they impact end users.

• Oracle Log Analytics Cloud Service monitors, aggregates, indexes, and

analyzes all log data from your applications and infrastructure – enabling users

to search, explore, and correlate this data to troubleshoot problems faster,

derive operational insight, and make better decisions. This service is built on

Oracle Management Cloud's secure, unified big data platform and enables you

to apply Machine Learning algorithms on log data.

• Oracle IT Analytics Cloud Service provides 360-degree insight into the

performance, availability, and capacity of applications and infrastructure

11 ISV WELCOME KIT

investments, enabling line-of-business and IT executives, analysts, and

administrators to make critical decisions about their IT estate.

Tagging When you have many resources (for example, instances, VCNs, load balancers, and block volumes) across multiple compartments in your tenancy, it can become difficult to track resources used for specific purposes, or to aggregate them, report on them, or take bulk actions on them. Tagging allows you to define keys and values and associate them with resources. You can then use the tags to help you organize and list resources based on your business needs. More importantly, tags are managed through UI console and API with governance and can be defined based on a namespace or free form. Tags can be used in a variety of ways:

• Tags for differentiating between dev, test, stage, prod, standby, DR resources

• Tags for differentiating between LOB, Customers

• Tags for differentiating between Security levels – high, medium, low

• Tags for rudimentary License tracking

• Tags for usage tracking

Tags are most useful when you develop automation scripts that retrieve tag values on resources and operate programmatically on the resources that have a specific tag value. For example, your automation script may start up all resources with a tag of “standby” when traffic to your web application is high. Billing Usage and consumption can be tracked through myservices UI and API at a daily and monthly granularity. Oracle invoices based on consumption against a rate card.

Reference: Technical White Paper Oracle Cloud Infrastructure Documentation

12 ISV WELCOME KIT

4 - Backup and Disaster Recovery in the Cloud

Backup in the Oracle Cloud

Backup and recovery of applications and application data is the fundamental protection

strategy for maintaining enterprise business continuity. Cloud backup refers to backing

up data to a remote, cloud-based server. As a form of cloud storage, cloud backup data

is stored in and accessible from multiple distributed and connected resources that

comprise a cloud. The idea is to achieve optimal high availability/ Backup & DR for

customers in the public and hybrid clouds at the lowest cost and complexity. Few

strategies for creating backup in the Oracle cloud are discussed in this document.

Oracle Database Backups

1. Oracle Maximum Availability Architecture (MAA) is Oracle's best practices blueprint based on proven Oracle high availability technologies, expert recommendations and customer experiences. The goal of MAA is to achieve optimal high availability for Oracle customers at the lowest cost and complexity. Depending on the specific RTO (recovery time objective) and RPO (recovery point objective) for each database, Oracle customers deploy different Oracle Maximum Availability Architecture (MAA) strategies.

Oracle MAA Best Practices Blueprint for High Availability

Oracle MAA Reference Architectures in the Cloud

2. In Oracle Cloud Infrastructure, we have the Oracle Storage Cloud Service that can be leveraged to backup databases in the cloud. Oracle Database Backup addresses the above needs by providing a low-cost alternative for storing backups in an offsite location. An Oracle Public Cloud object-based storage offering enables you to store your on-premises or cloud-deployed database backups. You can use Oracle Database Backup as the Primary backup for second or third tier databases or use the cloud backup as a secondary copy for long-term archival requirements.

13 ISV WELCOME KIT

Backup Compute and Storage Volumes in OCI

1. Storage Volume backup -The backups feature of the Oracle Cloud Infrastructure Block Volume service lets you take point-in-time, complete images of all of the data on a block volume. These images can then be restored to new volumes either immediately after a backup or later that you choose. Backups are encrypted and stored in Oracle Cloud Infrastructure Object Storage, and can be restored as new volumes to any Availability Domain within the same region they are stored. This capability provides you with a spare copy of a volume and gives you the ability to successfully complete disaster recovery within the same region.

Backing-up Volumes in OCI

2. Compute Backup using Custom Images - You can create a custom image of a Bare Metal instance's boot disk and use it to launch other instances. Instances you launch from your image include the customizations, configuration, and software installed when you created the image. Custom images do not include the data from any attached block volumes

Creating Custom Images in OCI

High Availability in Oracle Cloud Infrastructure

Oracle Cloud Infrastructure is available in regions and Availability Domains. A region is a localized geographic area, and an Availability Domain is one or more data centers located within a region. A region is composed of several Availability Domains. Most Oracle Cloud Infrastructure resources are either region-specific, such as a virtual cloud network, or Availability Domain-specific, such as a compute instance.

Availability Domains are isolated from each other, fault tolerant, and very unlikely to fail simultaneously. Because Availability Domains do not share infrastructure such as power or cooling, or the internal Availability Domain network, a failure at one Availability Domain is unlikely to affect the availability of the others.

All the Availability Domains in a region are connected to each other by a low latency, high bandwidth network, which makes it possible for you to provide high-availability connectivity to the Internet and customer premises, and to build replicated systems in multiple Availability Domains for both high-availability and disaster recovery.

Oracle Cloud Infrastructure provides you with all the tools required to achieve High Availability for production enterprise applications. There are four primary ways to achieve HA for production applications in OCI.

• High-availability with a load balancer instance and multiple VMs in separate ADs

• Database Systems with active dataguard sync and backups to object storage • FastConnect connectivity for dedicated network bandwidth

14 ISV WELCOME KIT

• RAC & Exadata available as part of Oracle Cloud Infrastructure

Backing-up Databases in OCI

Backing-up and Exadata Database in OCI

5 - Deployment & Delivery Models

There are different models for deploying your applications to Oracle Cloud Infrastructure. On this section, we will describe two models largely adopted by Independent Software Vendors:

• Multi-tenant SaaS applications

• Single-tenant SaaS applications & managed services

One key component for managing tenants (single or multiple) is security and isolation. OCI leverages Identity and Access Management (IAM) services to allow you to deploy your applications to the cloud by managing complex organizations and rules with logical groups of users and resources, and also, to define polices so that you can control who has access to your cloud resources, what type of access they have, and to which specific resources.

Service Vendors can deploy a N-tier application for multiple customers on a shared environment (tenancy), where each customer only has access to its own set of infrastructure resources, completely secured and isolated from other customers. Or we can have a large Enterprise managing multiple projects and teams in a single tenancy where each team have with different access to their resources. With the IAM Service, you can leverage a single model for authentication and authorization across all the OCI services. Resource management and authorization can happen at the account level or at the compartment level, while still allowing central auditing and billing.

The IAM Service was built from the ground up to allow you to enforce the security principle of least privilege — by default, new users are not allowed to perform any actions on any resources. Administrators should grant each user only the access appropriate for that specific user.

There are some key concepts of the IAM Services you need to understand:

• Resource – The cloud objects that your company's employees create and use when interacting with Oracle Cloud Infrastructure. For example: compute

15 ISV WELCOME KIT

instances, block storage volumes, virtual cloud networks (VCNs), subnets, route tables, etc.

• Region - The region where your IAM resources reside. All IAM resources are global and available across all regions, but the master set of definitions reside in a single region, the home region. You must make changes to your IAM resources in your home region. The changes will be automatically propagated to all regions.

• Compartment — A logical container for your cloud resources. Administrators within an account can create one or more compartments to organize and manage resources within their account. You might use compartments to:

o Meter usage separately for distinct business units (e.g., for chargeback purposes)

o Separate your software development environments (e.g., dev, test, production)

o Simplify permission management (allow certain employees full or partial access to specific compartments)

o Minimize the set of resources visible to certain sets of users

• Tenancy (Root compartment) — The top level compartment within your account. The root compartment is created for you automatically when your account is provisioned.

• User — An entity that can be authenticated. A user can be either a person or a machine account. Each user has a unique name in your account and a globally unique identifier. Users can be given passwords to access the web Console and keys to access the services through the APIs. About Users.

• Group — A set of users. Groups are used to simplify access management. For example, software developers can be grouped together as members of a “developers” group, which allows them to read, write, and modify code. A single user can be a member of multiple groups. About Groups.

• Dynamic Groups - Dynamic groups allow you to group Oracle Cloud Infrastructure computer instances as "principal" actors (similar to user groups). You can then create policies to permit instances to make API calls against Oracle Cloud Infrastructure services. When you create a dynamic group, rather than adding members explicitly to the group, you instead define a set of "matching rules" to define the group members. For example, a rule could specify that all instances in a particular compartment are members of the dynamic group. The members can change dynamically as instances are launched and terminated in that compartment. About Dynamic Groups.

• Policy — A document that specifies who can access which Oracle Cloud Infrastructure resources your company has, and how. A policy is comprised of policy statements. Multiple policies comprise a policy corpus. About Policies.

16 ISV WELCOME KIT

The IAM Service is enabled by default at no additional charge. When your company signs up for an Oracle account and Identity Domain, Oracle sets up a default administrator for the account. This person will be the first IAM user for your company and will be responsible for initially setting up additional administrators. Your tenancy comes with a group called Administrators, and the default administrator automatically belongs in this group. You can't delete this group, and there must always be at least one user in it.

Your tenancy also automatically has a policy that gives the Administrators group access to all of the Oracle Cloud Infrastructure API operations and all of the cloud resources in your tenancy. You can neither change nor delete this policy. Any other users you put into the Administrators group will have full access to all of the services. This means they can create and manage IAM users, groups, policies, and compartments. And they can create and manage the cloud resources such as virtual cloud networks (VCNs), instances, block storage volumes, and any other new types of Oracle Cloud

Infrastructure resources that become available in the future.

About IAM

17 ISV WELCOME KIT

Multi-tenant SaaS Applications

You can manage multiple organizations in the same tenancy by creating one compartment per customer to manage all their resource such as compute, storage and network. Oracle Database can be placed in a separate compartment and each tenant’s data is stored in a separate PDB.

Single Tenant SaaS & Managed Services

In case you have one single tenant, you can create multiple compartments to manage access to different resources types, e.g. Network Administrators should only have access to Networks Compartment to manage Network related resources – VCN, Load Balancer, etc. Similarly, it’s possible to create compartments to manage resources specifics to one project.

Bring Your Own License (BYOL)

Oracle Database

Oracle Cloud Infrastructure supports a licensing model with two license types. With License included, the cost of the cloud service includes a license for the Database service. With Bring Your Own License (BYOL), Oracle Database customers with an Unlimited License Agreement or Non-Unlimited License Agreement can use their license with Oracle Cloud Infrastructure. You do not need separate on-premises licenses and cloud licenses. BYOLDB instances support all advanced Database service manageability functionality, including backing up and restoring a DB system, patching, and Oracle Data Guard.

18 ISV WELCOME KIT

You can enable BYOL when you launch a DB system. Enabling BYOL impacts how the usage data for the instance is metered and subsequent billing. For database versions 12.2, 12.1, and 11.2, the Database service supports BYOL for the following shapes and editions:

• Bare Metal Shapes: BM.HighIO1.36, BM.DenseIO1.36, and BM.RACWithLocalStorage1.72 (2-Node RAC)

• Virtual Machine Shapes: VM.Standard1 (X5 with remote storage): 1, 2, 4, 8, and 16 core

• Exadata X6: Quarter, Half, and Full racks

Some restrictions apply:

• If you enable BYOL, you cannot switch between the BYOL and license-included licensing model on the same instance. Instead, you have to terminate and then recreate the instance.

• The Database service supports BYOL only for customers who use the Universal Credit Plan. Non-metered customers cannot use BYOL. Existing customers can migrate from a non-metered model to a Universal Credit Plan.

• You can only use the options you purchased as part of your ULA.

• If you have Standard or Enterprise Licenses with additional options, you need to use a Standard Edition or Enterprise Edition license.

• If you have any additional database option other than RAC, Active Data Guard, Database In-Memory, or Multitenant, you need to use Enterprise Edition High Performance.

• If you have Active Data Guard, Database In-Memory, or Multitenant, you need to use Enterprise Edition Extreme Performance. If you choose the Extreme Performance edition for a RAC configuration (for example, 2-node RAC or 2-node RAC on VMs), then the additional OCPUs will be charged at the RAC OCPU pricing.

Virtual Machine Images and Virtual Appliances

Oracle Cloud Infrastructure uses images to launch instances. You specify an image to use when you launch an instance.

You can create a custom image of a Bare Metal instance's boot disk and use it to launch other instances. Instances you launch from your image include the customizations, configuration, and software installed when you created the image. Custom images do not include the data from any attached block volumes.

The Oracle Cloud Infrastructure enables you to bring versions of operating system (OS) to the cloud as long as the underlying hardware supports it. The services do not depend on the OS you run. The Bring Your Own Image (BYOI) feature:

• Enables lift-and-shift cloud migration projects.

• Supports both older and cutting edge operating systems.

• Encourages experimentation.

• Increases infrastructure flexibility.

Bring Your Own Image Scenarios

The Bring Your Own Image scenarios supported in Oracle Cloud Infrastructure include scenarios based on new operating system images and scenarios based on existing operating system images.

19 ISV WELCOME KIT

- Building new operating system images

• Oracle-provided images: Oracle provides several pre-built images for Oracle Linux, Microsoft Windows, Ubuntu and CentOS. For the complete list of images, see Oracle-Provided Images.

• RHEL 7.4 images: You can build new RHEL 7.4 images for bare metal and VM instances using a terraform template, see Terraform Provider for RHEL 7.4.

- Bringing existing operating system images

• Importing custom images for emulation mode: You can import existing operating system images using either the VMDK or QCOW2 formats, to run in emulation mode VMs. For more information, see Bring Your Own Custom Image for Emulation Mode Virtual Machines.

• Bring Your Own KVM: You can bring your own operating system images or older operating systems such as Ubuntu 6.x, RHEL 3.x, CentOS 5.4 using KVM on bare metal instances. For more information, see Installing and Configuring KVM on Bare Metal Instances with Multi-VNIC. For automate process, see github.

• Bring Your Own OVM: You can bring your Oracle VM workload to Oracle Cloud Infrastructure, for more information, see Installing and Configuring Oracle VM on Oracle Cloud Infrastructure.

Custom Images Limitations and Considerations:

1. The following IP addresses are reserved for Oracle Cloud Infrastructure use:

• 169.254.0.2, 169.254.2.2-169.254.2.254: For iSCSI connections to the boot and block volumes.

• 169.254.0.3: For uploads relating to kernel updates.

• 169.254.169.254: For DNS (port 53) and Metadata (port 80) services.

• 169.254.169.253: For Windows instances to activate with Microsoft Key Management Service (KMS).

• Three IP addresses in each subnet: The first two IP addresses and the last one in each subnet's CIDR are reserved.

2. When you create an image of a running instance, the instance shuts down and remains unavailable for several minutes. When the process completes, the instance restarts.

3. You cannot create a new custom image if that instance is already engaged in the image creation process. When you start to create a custom image, the system implements a 20 minute timeout, during which you cannot create another image of the same instance. You can, however, create images of multiple instances at the same time.

4. Custom images are available to all users authorized for the compartment in which the image was created.

5. A custom image cannot exceed 50 GB.

20 ISV WELCOME KIT

6. You can create a maximum of 25 custom images per region per root compartment.

7. You cannot create an image of an Oracle Database instance.

8. Custom images cannot be exported or downloaded.

9. If you use a custom image and update the OS kernel on your instance, you must also upload the update to the network drive. See OS Kernel Updates for more information.

See Bring Your Own Image for information on how to deploy any version of any operating system that is supported by the Oracle Cloud Infrastructure hardware.

X5 and X7 Compatibility for Custom Images

Oracle X5 and X7 servers have different host hardware. As a result, using an X5 image on an X7 bare metal or virtual machine (VM) instance may not work without additional modifications. Oracle Cloud Infrastructure recommends for X7 hosts that you use the Oracle-provided images for X7. See Oracle-Provided Image Release Notes for more information about which images support X7. These images have been explicitly created and tested with the new hardware.

If you do attempt to use an existing X5 image on X7 hardware, note that Ubuntu 14.04 and all Windows and CentOS versions are not cross-compatible.

Oracle Linux and Ubuntu 16.04 are cross-compatible, however you need to update the kernel to the most recent version to install the latest device drivers.

The primary device drivers that are different between X5 and X7 hosts are:

• Network device drivers

• NVMe drive device drivers

• GPU device drivers

Additional updates may be required depending on how you have customized the image.

Windows Images

You can BYOL for Microsoft Windows subject to Microsoft's Terms and Conditions. The table below shows the Microsoft software for which you can BYOL to Oracle Cloud Infrastructure. For more details check OCI FAQ.

Microsoft Software Bare Metal Instances

Virtual Machine Instances

Windows Server* Yes License from Oracle Cloud Infrastructure only

SQL Server* Yes Yes **

MSDN Yes Not permitted

Other Yes Yes **

You can also create a Windows custom image of a bare metal or VM instance's boot disk and use it to launch other instances. Instances you launch from your image include the customizations, configuration, and software installed when you created the image. Windows supports two kinds of images: generalized and specialized. Generalized images are images that have been cleaned of instance-specific information. Specialized images are point-in-time snapshots of the boot disk of a running instance, and are useful for creating backups of an instance. Oracle Cloud Infrastructure supports bare metal and VM instances launched from both generalized and specialized custom Windows images.

21 ISV WELCOME KIT

A generalized image has a generalized OS disk, cleaned of computer-specific information. The images are generalized using Sysprep. Generalized images can be useful in scenarios such as quickly scaling an environment. Generalized images can be configured to preserve the existing opc user's account, including the password, at the time the image is created, or configured to recreate the opc user account, including generating a new, random password that you retrieve using the API. A specialized image has an OS disk that is already fully installed and is essentially a copy of the original bare metal or VM instance. Specialized images are intended to be used for backups so that you can recover from a failure. Specialized images are useful when you are testing a task and may need to roll back to known good configuration. Specialized images are not recommended for cloning multiple identical Bare Metal instances or VMs in the same network because of issues with multiple computers having the same computer name and ID. When creating a specialized image, you must remember the opc user's password; a new password is not generated when the instance launches, and it cannot be retrieved from the console or API.

Containerized Deployments

Oracle provides a complete and enterprise-grade suite of cloud services to build, deploy, and operate container-native microservices and serverless applications. The Container Native Application Development Platform provides an open, integrated container developer experience as a fully-managed, high-availability service on top of an enterprise-grade cloud (bare metal & secure).

In addition to that, Oracle provides a Terraform-based Kubernetes installation for Oracle Cloud Infrastructure. It consists of a set of Terraform modules and an example base configuration that is used to provision and configure the resources needed to run a highly available and configurable Kubernetes cluster on Oracle Cloud Infrastructure (OCI). See here for more information.

22 ISV WELCOME KIT

6- Promoting

Listing Applications on the Oracle Cloud Marketplace

The Oracle Cloud Marketplace https://cloud.oracle.com/marketplace provides the single

location for Oracle’s ISV, SI and MSP Partners to list their applications and Oracle Cloud

related services for the Oracle SaaS, PaaS and Infrastructure cloud services.

The Oracle Cloud Marketplace enables partners to list:

» Applications – that run-on the Oracle Cloud Infrastructure and Platform services.

Partner applications include:

» Cloud native multi-tenant applications running as SaaS offerings from the partner,

running on the Oracle Cloud

» Single tenant applications running on Oracle Cloud delivered directly by the ISV

partner (single-tenant SaaS), or through a MSP Managed Service offering

» Virtual appliances and ISV packaged applications and for customer to deploy into

their own Oracle Cloud tenancy

» Cloud-to-Cloud SaaS integrations via public APIs for data exchange and process

integration.

» PaaS-for-SaaS extensions to implement custom user interactions and integration

logic

» PaaS & IaaS ecosystem partner tools to support building, running and managing

applications on the Oracle Cloud

» Cloud Service specific native extensions

» Integrations & Extensions – that complement and extend the Oracle Cloud

services to provide additional functionality and integrations to external and 3rd party

systems.

23 ISV WELCOME KIT

» Implementation Services – implementation services offered by SI partners

supporting the Oracle Cloud. To quality for listing Partners must have proven

success with the Oracle Cloud, including a reference for a least one successful

customer implementation for each Oracle Cloud service they provide services for.

» Managed Services – Oracle Managed Service Provider program partners offering

managed services for Oracle Apps (EBS, PeopleSoft, etc.) and non-Oracle

workloads running on the Oracle Cloud Platform and Infrastructure services.

To list applications on the Oracle Cloud Marketplace:

» Step 1 - Join to Oracle Partner Network:

To join the Oracle PartnerNetwork go to partnerstore.oracle.com and follow the

steps to sign-in and Join Oracle PartnerNetwork. If you have any issues with the

sign-up process you can contact the Oracle Partner Business Center.

» Step 2 – Complete the Oracle Cloud Interoperability Addendum:

Once the OPN account is active you can go to Memberships > Other in

partnerstore.oracle.com and submit the “Cloud Interoperability Addendum” – enter

the names of the apps or services that will be integrated with the Oracle Cloud in the

Partner Cloud Services field (do not list the Oracle Product names).

» Step 3 – Register for an Oracle Cloud Marketplace Publisher Account:

Go to cloud.oracle.com/marketplace and select Publishers > Become a Publisher

and select the option to “Publish Services and Applications on the Oracle Cloud

Marketplace”.

» Step 4 - Create an Application Listing and Submit for Review:

Login to cloud.oracle.com/partner to create a new application listing. Complete the

listing content, and attach the technical review documentation in the Additional

Information > Supporting Documents section (use the Get Templates to

download the review documentation templates), and Submit for review.

The Oracle Cloud Marketplace provides several options for partners to enable direct or

indirect provisioning of their application or integration/extension:

» Direct install to oracle cloud

» Redirect to partners fulfillment system

» Lead capture

In additional to being listed on the Oracle Cloud Marketplace site, the Direct install listing

can also be views within embedded the marketplace view within some of the Oracle

Cloud Services. For example, VM images listed on the Marketplace can installed directly

from within the Oracle Cloud Infrastructure Classic Compute console.

Applications listings can also include Demos and Free Trials where the partner offers a

time-limited free trials running on Oracle Cloud

Partners can build their own demos and trial platform leveraging standard deployment

tooling, or use the leverage marketplace supported frameworks such as the Oracle Jump

Start for Oracle Cloud Infrastructure.

“Get App” direct Install to end-customer tenancy

Partners can choose enable direct install of their application into the end-customers

Oracle Cloud tenancy. The “Get App” deployment currently supports. Partner

applications are typical provided as BYOL, or as a Free or Trial distribution. Users must

accept the partner provided Terms and Conditions prior to installing the application.

24 ISV WELCOME KIT

Partners are provided details of application installations through the partner

administration portal.

“Get App” redirect

Partners can choose to redirect the “Get App” option on the Marketplace listing to their

own fulfilment site of choice, such as a customer sign-up/subscription portal. The partner

then manages the fulfillment of the request depending on the delivery model. E.g.

provision an account/subscription within a multi-tenant SaaS, or proceed with the

application specific flow-thru configuration or provisioning.

Lead Capture

For all other cases the Marketplace captures the contact information from the prospect

and forwards the lead information directly to the partner for follow-up. Partners are also

able to review all leads captured per listing in the partner administration portal.

Press Releases

After listing for the first time on the Oracle Cloud Marketplace you can choose release an

Oracle approved press release announcing availability on the Oracle Cloud Marketplace

Follow the Partner Press Release Guidelines and Approval Process to complete and

submit the Oracle Cloud Marketplace Press Release Template for Oracle review.

Participation in other OPN initiatives

Partners that as listed on the Oracle Cloud Marketplace are eligible to apply for Oracle

PartnerNetwork (OPN) Cloud Designations Program and increased benefits. More

information on Cloud Standard Designation (first tier of the Cloud Designations Program)

here.

The Partner/Customer Reference Program showcases partner successes through

references that take the form of magazine articles, customer forums, videos, customer

snapshots, or podcasts.

Refer and resell via the Oracle Cloud Resell Program. Participate in the lifetime value of

the subscription including add-on, upgrade and renewal opportunities.

Leverage the Partner Event Promotion Service. You can watch the Partner Event

Publishing Demo and learn how to promote your partner-led events and get them

published on Oracle.com/events. Partners can also promote their offering(s) directly to

Oracle customers by participating in conferences and events. See Oracle’s Events

Calendar here.

Find an Oracle Customer User Group. More than 900 user groups focused on products,

technologies, applications and industries provide dynamic forums where customers can

share information, experiences and expertise, and partners can market their offerings.

Other Marketing Resources

Use Oracle Trademark in Google AdWords Campaigns. Eligible partners are exclusively

authorized by Oracle Corporation to use the Oracle trademark for their Google AdWords

campaigns.

25 ISV WELCOME KIT

Market to Oracle’s Technology Network to gain mindshare and create awareness within

this community. Once your offer is approved, Oracle will work with you to showcase your

offer in one of Oracle's Technology Newsletters.

Market to Oracle Publishing Subscribers (Oracle Magazine, Profit, Java Magazine and

Oracle InDepth Newsletters). Click here to go directly to the Oracle Publishing website.

Modern Marketing Tools for demand generation activities:

Oracle Marketing Automation Service - cloud/digital marketing platform (such as eMail

Marketing) that can help you deliver Oracle marketing campaigns and content directly to

our customers.

Partner Marketing Kits with exciting new Cloud additions under SaaS (Software as a

Service), PaaS (Platform as a Service), and OCI (Oracle Cloud Infrastructure).

Oracle Corporation, World Headquarters Worldwide Inquiries

500 Oracle Parkway Phone: +1.650.506.7000

Redwood Shores, CA 94065, USA Fax: +1.650.506.7200

Copyright © 2018, Oracle and/or its affiliates. All rights reserved. This document is provided for information purposes only, and the contents hereof are subject to change without notice. This document is not warranted to be error-free, nor subject to any other warranties or conditions, whether expressed orally or implied in law, including implied warranties and conditions of merchantability or fitness for a particular purpose. We specifically disclaim any liability with respect to this document, and no contractual obligations are formed either directly or indirectly by this document. This document may not be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without our prior written permission. Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners. Intel and Intel Xeon are trademarks or registered trademarks of Intel Corporation. All SPARC trademarks are used under license and are trademarks or registered trademarks of SPARC International, Inc. AMD, Opteron, the AMD logo, and the AMD Opteron logo are trademarks or registered trademarks of Advanced Micro Devices. UNIX is a registered trademark of The Open Group. 0218

C O N N E C T W I T H U S

blogs.oracle.com/oracle

facebook.com/oracle

twitter.com/oracle

oracle.com