Networking

00Overview

Build and tear down Oracle Cloud networks straight from a flow — create VCNs and subnets, wire up route tables and internet, NAT and service gateways, and control traffic with security lists and network security groups. Reserve and assign public IPs, manage DHCP options, and relocate networking resources between compartments as your environments change. The list and get actions let a flow inventory what already exists — audit a compartment, find a VCN by name, or check a resource's state before you change it.

Every field below is exactly what you see in the Flomation editor. Fields marked ● live picker let you choose from a list pulled live from your account — no IDs to look up.

01Connecting Networking

1. Pick how the node signs in with the Authentication field: Connect Oracle Cloud uses a managed connection so you never handle a private key, while API signing key (advanced) lets you fill the raw key fields yourself.
2. For Connect Oracle Cloud, open your Flomation environment's connections and add a new Oracle Cloud (API key) connection — give it a name, enter your Tenancy OCID and Region, and create it. Flomation generates the signing keypair for you.
3. Click Deploy to Oracle Cloud to run the supplied Resource Manager stack in the OCI Console, which creates a dedicated least-privilege user and uploads Flomation's public key; copy the User OCID from the stack outputs back into the wizard, choose Connect, then Test connection — a freshly uploaded key can take a short moment to become active, so if the test fails immediately, wait a few seconds and retry.
4. Back in the node, set Authentication to Connect Oracle Cloud, pick your connection in the Oracle Cloud connection field, and set the Compartment OCID for the compartment you want to work in.
5. For the advanced signing-key path instead, open your user's API Keys section in the OCI Console (profile avatar → your user → API Keys) and choose Add API Key; note the Tenancy OCID, User OCID, Region and Key Fingerprint shown in the generated configuration preview.
6. Store the private key PEM as a Flomation environment secret and pick it in the node's Private Key (PEM) field, then fill Tenancy OCID, User OCID, Region, Key Fingerprint (and Private Key Passphrase if the key is encrypted) and the Compartment OCID.

02Dhcp

OCI Networking: Create DHCP Options

oracle/networking/dhcp_options_create · Action

Create a DHCP options set in a VCN — the DNS resolution config subnets use. Supply the options as a JSON array.

Returns: tool_result, dhcp_options, id, lifecycle_state, success, error

OCI Networking: Delete DHCP Options

oracle/networking/dhcp_options_delete · Action

Delete an Oracle Cloud DHCP options by OCID.

Returns: tool_result, success, error

OCI Networking: Get DHCP Options

oracle/networking/dhcp_options_get · Action

Fetch one Oracle Cloud DHCP options by OCID.

Returns: tool_result, dhcp_options, lifecycle_state, success, error

OCI Networking: List DHCP Options

oracle/networking/dhcp_options_get_all · Action

List the DHCP options in an Oracle Cloud compartment, optionally filtered by VCN.

Returns: tool_result, dhcp_options_list, count, truncated, success, error

OCI Networking: Update DHCP Options

oracle/networking/dhcp_options_update · Action

Update editable attributes of an Oracle Cloud DHCP options set — display name, domain-name type, and the option entries (supply Options JSON to replace the DNS-server / search-domain entries).

Returns: tool_result, dhcp_options, lifecycle_state, success, error

03Internet

OCI Networking: Move Internet Gateway to Compartment

oracle/networking/internet_gateway_change_compartment · Action

Move an Oracle Cloud internet gateway to a different compartment.

Returns: tool_result, success, error

OCI Networking: Create Internet Gateway

oracle/networking/internet_gateway_create · Action

Create an internet gateway in a VCN — the door to the public internet for public subnets. Enable or disable it without deleting via Update.

Returns: tool_result, internet_gateway, id, lifecycle_state, success, error

OCI Networking: Delete Internet Gateway

oracle/networking/internet_gateway_delete · Action

Delete an Oracle Cloud internet gateway by OCID.

Returns: tool_result, success, error

OCI Networking: Get Internet Gateway

oracle/networking/internet_gateway_get · Action

Fetch one Oracle Cloud internet gateway by OCID.

Returns: tool_result, internet_gateway, lifecycle_state, success, error

OCI Networking: List Internet Gateways

oracle/networking/internet_gateway_get_all · Action

List the internet gateways in an Oracle Cloud compartment, optionally filtered by VCN.

Returns: tool_result, internet_gateways, count, truncated, success, error

OCI Networking: Update Internet Gateway

oracle/networking/internet_gateway_update · Action

Update editable attributes of an Oracle Cloud internet gateway.

Returns: tool_result, internet_gateway, lifecycle_state, success, error

04Nat

OCI Networking: Move NAT Gateway to Compartment

oracle/networking/nat_gateway_change_compartment · Action

Move an Oracle Cloud NAT gateway to a different compartment.

Returns: tool_result, success, error

OCI Networking: Create NAT Gateway

oracle/networking/nat_gateway_create · Action

Create a NAT gateway in a VCN — outbound internet access for private subnets, with no inbound. Optionally pin a reserved public IP.

Returns: tool_result, nat_gateway, id, lifecycle_state, success, error

OCI Networking: Delete NAT Gateway

oracle/networking/nat_gateway_delete · Action

Delete an Oracle Cloud NAT gateway by OCID.

Returns: tool_result, success, error

OCI Networking: Get NAT Gateway

oracle/networking/nat_gateway_get · Action

Fetch one Oracle Cloud NAT gateway by OCID.

Returns: tool_result, nat_gateway, lifecycle_state, success, error

OCI Networking: List NAT Gateways

oracle/networking/nat_gateway_get_all · Action

List the NAT gateways in an Oracle Cloud compartment, optionally filtered by VCN.

Returns: tool_result, nat_gateways, count, truncated, success, error

OCI Networking: Update NAT Gateway

oracle/networking/nat_gateway_update · Action

Update editable attributes of an Oracle Cloud NAT gateway.

Returns: tool_result, nat_gateway, lifecycle_state, success, error

05Nsg

OCI Networking: Move NSG to Compartment

oracle/networking/nsg_change_compartment · Action

Move an Oracle Cloud NSG to a different compartment.

Returns: tool_result, success, error

OCI Networking: Create Network Security Group

oracle/networking/nsg_create · Action

Create a Network Security Group (NSG) in a VCN — a firewall group that VNICs join. The NSG starts empty; add its rules with the 'Add NSG Rules' action.

Returns: tool_result, nsg, id, lifecycle_state, success, error

OCI Networking: Delete NSG

oracle/networking/nsg_delete · Action

Delete an Oracle Cloud NSG by OCID.

Returns: tool_result, success, error

OCI Networking: Get NSG

oracle/networking/nsg_get · Action

Fetch one Oracle Cloud NSG by OCID.

Returns: tool_result, nsg, lifecycle_state, success, error

OCI Networking: List NSGs

oracle/networking/nsg_get_all · Action

List the NSGs in an Oracle Cloud compartment, optionally filtered by VCN.

Returns: tool_result, nsgs, count, truncated, success, error

OCI Networking: Add NSG Rules

oracle/networking/nsg_rule_add · Action

Add security rules to a Network Security Group. Supply the rules as a JSON array, e.g. [{"direction":"INGRESS","protocol":"6","source":"0.0.0.0/0","tcpOptions":{"destinationPortRange":{"min":22,"max":22}}}]. OCI returns each new rule's id.

Returns: tool_result, security_rules, count, success, error

OCI Networking: List NSG Rules

oracle/networking/nsg_rule_get_all · Action

List the security rules in a Network Security Group.

Returns: tool_result, security_rules, count, truncated, success, error

OCI Networking: Remove NSG Rules

oracle/networking/nsg_rule_remove · Action

Remove security rules from a Network Security Group by their rule ids.

Returns: tool_result, success, error

OCI Networking: Update NSG Rules

oracle/networking/nsg_rule_update · Action

Update specific existing security rules in a Network Security Group BY ID — this changes only the rules you list, it does not replace the whole rule set. Each rule in the JSON array must carry the id OCI assigned it (see List NSG Rules); an unknown id is rejected, not silently ignored.

Returns: tool_result, security_rules, count, success, error

OCI Networking: Update NSG

oracle/networking/nsg_update · Action

Update editable attributes of an Oracle Cloud NSG.

Returns: tool_result, nsg, lifecycle_state, success, error

06Public

OCI Networking: Create Public IP

oracle/networking/public_ip_create · Action

Create a public IP — reserved (persist and reassign) or ephemeral. Optionally assign it to a private IP.

Returns: tool_result, public_ip, id, lifecycle_state, success, error

OCI Networking: Delete Public IP

oracle/networking/public_ip_delete · Action

Delete an Oracle Cloud public IP by OCID.

Returns: tool_result, success, error

OCI Networking: Get Public IP

oracle/networking/public_ip_get · Action

Fetch one Oracle Cloud public IP by OCID.

Returns: tool_result, public_ip, lifecycle_state, success, error

OCI Networking: List Public IPs

oracle/networking/public_ip_get_all · Action

List public IPs in a compartment. Requires a scope (REGION or AVAILABILITY_DOMAIN).

Returns: tool_result, public_ips, count, truncated, success, error

OCI Networking: Update Public IP

oracle/networking/public_ip_update · Action

Update editable attributes of an Oracle Cloud public IP.

Returns: tool_result, public_ip, lifecycle_state, success, error

07Route

OCI Networking: Move Route Table to Compartment

oracle/networking/route_table_change_compartment · Action

Move an Oracle Cloud route table to a different compartment.

Returns: tool_result, success, error

OCI Networking: Create Route Table

oracle/networking/route_table_create · Action

Create a route table in a VCN — route rules that direct subnet traffic to a gateway or other target. Supply the rules as a JSON array, e.g. [{"networkEntityId":"ocid1.internetgateway...","destination":"0.0.0.0/0","destinationType":"CIDR_BLOCK"}].

Returns: tool_result, route_table, id, lifecycle_state, success, error

OCI Networking: Delete Route Table

oracle/networking/route_table_delete · Action

Delete an Oracle Cloud route table by OCID.

Returns: tool_result, success, error

OCI Networking: Get Route Table

oracle/networking/route_table_get · Action

Fetch one Oracle Cloud route table by OCID.

Returns: tool_result, route_table, lifecycle_state, success, error

OCI Networking: List Route Tables

oracle/networking/route_table_get_all · Action

List the route tables in an Oracle Cloud compartment, optionally filtered by VCN.

Returns: tool_result, route_tables, count, truncated, success, error

OCI Networking: Update Route Table

oracle/networking/route_table_update · Action

Update editable attributes of an Oracle Cloud route table.

Returns: tool_result, route_table, lifecycle_state, success, error

08Security

OCI Networking: Move Security List to Compartment

oracle/networking/security_list_change_compartment · Action

Move an Oracle Cloud security list to a different compartment.

Returns: tool_result, success, error

OCI Networking: Create Security List

oracle/networking/security_list_create · Action

Create a security list in a VCN — a set of ingress and egress firewall rules that subnets attach to. Supply the rules as JSON arrays, e.g. ingress [{"protocol":"6","source":"0.0.0.0/0","tcpOptions":{"destinationPortRange":{"min":443,"max":443}}}].

Returns: tool_result, security_list, id, lifecycle_state, success, error

OCI Networking: Delete Security List

oracle/networking/security_list_delete · Action

Delete an Oracle Cloud security list by OCID.

Returns: tool_result, success, error

OCI Networking: Get Security List

oracle/networking/security_list_get · Action

Fetch one Oracle Cloud security list by OCID.

Returns: tool_result, security_list, lifecycle_state, success, error

OCI Networking: List Security Lists

oracle/networking/security_list_get_all · Action

List the security lists in an Oracle Cloud compartment, optionally filtered by VCN.

Returns: tool_result, security_lists, count, truncated, success, error

OCI Networking: Update Security List

oracle/networking/security_list_update · Action

Update editable attributes of an Oracle Cloud security list.

Returns: tool_result, security_list, lifecycle_state, success, error

09Service

OCI Networking: Create Service Gateway

oracle/networking/service_gateway_create · Action

Create a service gateway in a VCN — private access to Oracle services (Object Storage, etc.) without the public internet. Supply the target service OCIDs (see List Services).

Returns: tool_result, service_gateway, id, lifecycle_state, success, error

OCI Networking: Delete Service Gateway

oracle/networking/service_gateway_delete · Action

Delete an Oracle Cloud service gateway by OCID.

Returns: tool_result, success, error

OCI Networking: Get Service Gateway

oracle/networking/service_gateway_get · Action

Fetch one Oracle Cloud service gateway by OCID.

Returns: tool_result, service_gateway, lifecycle_state, success, error

OCI Networking: List Service Gateways

oracle/networking/service_gateway_get_all · Action

List the service gateways in an Oracle Cloud compartment, optionally filtered by VCN.

Returns: tool_result, service_gateways, count, truncated, success, error

OCI Networking: Update Service Gateway

oracle/networking/service_gateway_update · Action

Update editable attributes of an Oracle Cloud service gateway.

Returns: tool_result, service_gateway, lifecycle_state, success, error

OCI Networking: List Services

oracle/networking/service_list_all · Action

List the Oracle services available to a service gateway in this region (their OCIDs go into Create Service Gateway).

Returns: tool_result, services, count, truncated, success, error

10Subnet

OCI Networking: Move Subnet to Compartment

oracle/networking/subnet_change_compartment · Action

Move an Oracle Cloud subnet to a different compartment. Asynchronous — returns a work-request id.

Returns: tool_result, work_request_id, success, error

OCI Networking: Create Subnet

oracle/networking/subnet_create · Action

Create a subnet in a VCN — a CIDR range that VNICs and instances attach to. Omit the availability domain for a regional subnet.

Returns: tool_result, subnet, id, lifecycle_state, success, error

OCI Networking: Delete Subnet

oracle/networking/subnet_delete · Action

Delete an Oracle Cloud subnet by OCID.

Returns: tool_result, success, error

OCI Networking: Get Subnet

oracle/networking/subnet_get · Action

Fetch one Oracle Cloud subnet by OCID.

Returns: tool_result, subnet, lifecycle_state, success, error

OCI Networking: List Subnets

oracle/networking/subnet_get_all · Action

List the subnets in an Oracle Cloud compartment, optionally filtered by VCN.

Returns: tool_result, subnets, count, truncated, success, error

OCI Networking: Update Subnet

oracle/networking/subnet_update · Action

Update editable attributes of an Oracle Cloud subnet.

Returns: tool_result, subnet, lifecycle_state, success, error

11Vcn

OCI Networking: Move VCN to Compartment

oracle/networking/vcn_change_compartment · Action

Move an Oracle Cloud Virtual Cloud Network (VCN) to a different compartment. Asynchronous — returns a work-request id.

Returns: tool_result, work_request_id, success, error

OCI Networking: Create VCN

oracle/networking/vcn_create · Action

Create a Virtual Cloud Network (VCN) in an Oracle Cloud compartment — the top-level private network that holds subnets, gateways and route tables. Give it one or more CIDR blocks.

Returns: tool_result, vcn, id, lifecycle_state, success, error

OCI Networking: Delete VCN

oracle/networking/vcn_delete · Action

Delete an Oracle Cloud Virtual Cloud Network (VCN) by OCID. The VCN must be empty first — remove its subnets, gateways, security lists and route tables before deleting.

Returns: tool_result, success, error

OCI Networking: Get VCN

oracle/networking/vcn_get · Action

Fetch one Oracle Cloud Virtual Cloud Network (VCN) by OCID — its CIDR blocks, lifecycle state, DNS label and default route table / security list / DHCP options.

Returns: tool_result, vcn, lifecycle_state, success, error

OCI Networking: List VCNs

oracle/networking/vcn_get_all · Action

List the Virtual Cloud Networks (VCNs) in an Oracle Cloud compartment, with their CIDR blocks and lifecycle state. Optionally filter by display name. Large compartments are capped — check the 'truncated' output to tell a complete listing from a partial one.

Returns: tool_result, vcns, count, truncated, success, error

OCI Networking: Update VCN

oracle/networking/vcn_update · Action

Update editable attributes of an Oracle Cloud VCN.

Returns: tool_result, vcn, lifecycle_state, success, error

12Notes & Limitations

Behaviours and constraints worth knowing before you build with these nodes.

• When you update a security list, route table, DHCP options set or service gateway and supply a rule or service list, that list replaces the whole existing set rather than adding to it, and leaving the field blank keeps the current entries, so always pass the complete set you want.
• Each list action walks at most 25 pages of results and marks its Truncated output true when a compartment holds more, so check that flag before treating a listing as a complete inventory.
• Moving a VCN or subnet to another compartment runs asynchronously and returns a work-request id, while every other resource's change-compartment action completes immediately, so a relocated VCN or subnet may take a moment to appear in the target compartment.
• A VCN can only be deleted once it is empty, so tear networking resources down in dependency order — remove a VCN's subnets, gateways, security lists and route tables before deleting the VCN itself, and allow a brief moment for child resources to finish terminating before removing their parent.
• Listing public IPs requires you to choose a scope, because reserved public IPs are regional while ephemeral ones belong to a single availability domain, so set the scope to Region or Availability Domain to match the addresses you want and supply the availability domain when you pick that scope.