Configuring an OCI Cache Cluster's Network Security Groups

Set up the Network Security Groups (NSGs) for an OCI Cache cluster.

The NSG can be in the same compartment or a different compartment, but must be in the same VCN as the cluster's subnet.

You can configure up to five NSGs for a cluster.

For IPv6 connectivity, configure the same private routing and security model you use for IPv4, and add IPv6-specific rules as needed:

Add the IPv6 CIDR for the client subnet as the source in the cache ingress rule.
Allow stateful TCP ingress on port 6379 to the cache endpoint.
Allow the corresponding egress from the client subnet.

For information about IPv6 addresses, VCNs, subnets, routing, and security rules, see IPv6 Addresses.

1. On the Clusters list page, select the cluster that you want to work with. If you need help finding the list page or the cluster, see Listing OCI Cache Clusters.
2. On the cluster's details page, select the Security tab.
3. Select Add under Network security groups.
4. In the Network security groups panel, select the NSG you want to configure for the cluster from the list for a specific compartment.
5. Select Save changes.
Use the oci redis redis-cluster redis-cluster update command and required parameters to configure NSGs for a cluster:
oci redis redis-cluster redis-cluster update --redis-cluster-id <cluster_OCID> [OPTIONS]
For information about using the CLI, see Command Line Interface (CLI). For a complete list of flags and options available for CLI commands, see the CLI Command Reference.
Run the UpdateRedisCluster operation to configure NSGs for a cluster.