Service Gateway

Oracle Cloud Infrastructure (OCI) Service Gateway provides private, secure access to multiple Oracle Cloud services simultaneously from within a virtual cloud network (VCN) or on-premises network via a single gateway without traversing the internet. Services accessed through their public IP address are routed through OCI Service Gateway rather than an internet gateway when exiting a VCN.

Benefits of OCI Service Gateway


1. Secure, private access to multiple Oracle Cloud services

Ensure that data stays within OCI, even when communicating with public services. OCI Service Gateway enables simultaneous private access to public services, keeping all traffic off the public internet.

2. 50+ services accessible

More than half of the services offered in OCI are available via OCI Service Gateway, including Oracle Cloud VMware Solution, OCI Compute, Oracle Functions, OCI DNS, OCI Object Storage, and Oracle Autonomous Data Warehouse. View the complete list.

3. No additional fees for OCI Service Gateway

OCI Service Gateway is available at no additional cost. There’s no per-hour connection fee or per-byte data processing fee, which other cloud providers typically charge for similar services.

How does OCI Service Gateway work?

Read the documentation

A service gateway exists within your VCN as a regional service. Only one is needed per VCN. Each service gateway can access more than 50 discreet services within OCI.

Configure OCI Service Gateway to access the desired service or services, such as OCI Object Storage, OCI DNS, and so on.

Update the routing table for a subnet to direct traffic for a desired service or services to the service gateway. OCI Service Gateway does not require an IP address itself.

Resources within the VCN will communicate automatically and transparently with the desired service via the service gateway. Resources in an on-premises network will travel over a virtual private network or FastConnect dedicated circuit (private peering) to a dynamic routing gateway, and then to the service gateway in the same VCN. Network traffic remains within OCI and does not traverse the public internet.

If more services are needed, the service gateway and routing table can be modified without disturbing any previous configurations.


Service Gateway diagram, description below

This image shows a logical layout of resources and connections in a typical scenario for OCI Service Gateway.

An OCI region is shown that contains a virtual cloud network with an attached internet gateway, dynamic routing gateway, and service gateway.

The virtual cloud network contains a public-facing subnet with a virtual machine resource. The virtual machine has access to the internet through the internet gateway.

The virtual cloud network also contains a private subnet with a virtual machine resource.

Within the region is a grouping of Oracle-managed resources called the Oracle Services Network. This includes OCI Object Storage and a database service. The Oracle Services Network can be reached through the service gateway without leaving the network in the region.

Resources in the private subnet can access eligible services in the Oracle Services Network through the service gateway. Resources in the on-premises location can also reach the Oracle Services Network through the private connection to the dynamic routing gateway and then through the service gateway without going over the public internet.

Get started with Service Gateway


Oracle Cloud Free Tier

Build, test, and deploy applications on Oracle Cloud—for free. Sign up once, get access to two free offers.


Cloud Training—Oracle Cloud Infrastructure

Explore cloud training resources with Oracle Cloud Infrastructure training videos, self-paced learning labs, and certifications.


Explore Oracle Cloud Infrastructure

Oracle Cloud Infrastructure combines the elasticity and utility of the public cloud with the control, security, performance, and predictability of on-premises computing environments.


Contact sales

Interested in learning more about Oracle Cloud Infrastructure? Let one of our experts help.

* OCI Service Gateway requires a paid OCI account, either as a pay-as-you-go or Universal Credits contract.