OCI Connector

When you create an OCI connector, you are authorizing FortiADC to periodically (default 30s) get information of OCI instances and dynamically populates it in server pool configuration.

To create an OCI Connector:

1. Go to Security Fabric > External Connectors.
2. Click Create New.
3. Under Public SDN, select OCI. The OCI screen is displayed.
4. Configure the following options, and then click Save.
   

   Name	Type a name for the external connector object.
   Status	Toggle on to enable the external connector object. Toggle off to disable the external connector object.
   Update Interval (s)	Specify the update interval for the connector to get OCI objects and dynamically populates the information in the server pool configuration.
   OCI region type	Specify the OCI region type.
   OCI region	Specify the OCI region where your compute instances are located.
   User ID	The user's OCID.
   Tenant ID	The tenancy's OCID. Refer to this article on how to get the user's OCID and tenancy's OCID: https://docs.oracle.com/en-us/iaas/Content/API/Concepts/apisigningkey.htm#five
   Compartment ID	The OCID of the Compartment in which your compute instances are deployed.
   Certificate	The certificate that FortiADC uses to build connections with OCI instances. You can select an existing one or create a new one. Refer to GManage and validate certificates.
   OCI HA status	Enable this option so that the system will use this connector to get the HA members' information if this FortiADC is deployed in HA mode and is the primary node.
   Use Metadata IAM	Enable this option to assign IAM role for FortiADC to access OCI objects. Note: It must be enabled if the connector is used for OCI HA.

After the connector is created, you can select this connector when creating a server pool. FortiADC will then get the IP addresses of the compute instances from OCI and dynamically populates the objects in server pool configuration, as shown in the following screenshots. Skip this step if you have enabled OCI HA status because in this case the connector will be used by the system to get the information of the HA members instead of the server pool members.

You can use the IP Address Type option to get the private address or public address of the instances. This option is supported only when FortiADC is deployed on OCI.