Oracle Analytics Cloud and Server
Can we do sftp from OAC bi publisher to local on prem?
Summary:
Can we do sftp from OAC bi publisher to local on prem? Please suggest If anyone ever tried this
Content (required):
6
Version (include the version you are using, if applicable):
Code Snippet (add any code snippets that support your topic, if applicable):
Answers
-
you need to have VPN Tunnel to connect. Please check Remote Data Gateway or Fast Connect / IPsec VPN
-
@Rajesh_Kolli : https://docs.oracle.com/en/cloud/paas/analytics-cloud/acabi/set-delivery-destinations.html
In this page you see a list of supported delivery destinations, as you can see FTP and SFTP are supported.
A VPN isn't a requirement, it all depends on the networking needs for your OAC instance to reach the SFPT server (that could also be exposed publicly with a domain or public IP address.
Just make sure you have all the networking details clearly defined before to start testing SFTP: spending hours on Publisher "not working" for what in the end is a networking issue isn't fun.
-
@Gianni Ceresa I have followed this document and asked our team to whitelist these IP's
when I tried to test connection I see this error
Now I am not sure where to check for errors
Like no where to really find the error from logs.
Thank you for the help
-
OAC is like a black box: there is little to no logs other than what you see on screen (which is weird as OAC has about 10 different log files all containing really important messages), it's the downside of a fully manage product.
To be fair I have no idea if there is an official debug process on the OAC side. I would start listening to all traffic reaching my SFTP host (on the provided port) to see if there is something getting there at least.
You said you did ask your team to whitelist a set of IPs, can't you ask them if they see blocked connections for the SFTP host at the time you do your tests?
The list of IPs you asked to be whitelisted is not really the one used by your product. It is related to OAC Gen1, the very first release of OAC instances that was available only in a few cloud regions (as you see only a few are listed). Your OAC is probably an OCI based instance, I believe they call it Gen2 now, and they are available in all the cloud regions. That's what make that list not valid. But I have no idea where you can find the public IP of your OAC instance.
I randomly found this looking for OAC Gen2: You are supposed to have the Gateway IP directly in your instance page.
-
It actually looks a list of IP that could be a bit more correct than the one you found: https://docs.oracle.com/en/cloud/paas/analytics-cloud/acoci/manage-service-access-and-security.html#GUID-C13DE22F-5069-4704-B64E-2F6D28B8D027
If you scroll a bit you find a similar table as the one you did use, but this one has every single cloud region, there is a chance it's a correct list.
