Once the volume is attached , you need to log on to the instance and use the
iscsiadm command-line tool to configure the iSCSI connection. After you configure the volume, you can mount it and use it like a normal hard drive.
To enhance security, Oracle enforces an iSCSI security protocol called CHAP that provides authentication between the instance and volume.
Accessing a Volume's iSCSI Information
When you successfully attach a volume to an instance, Block Volume provides a list of iSCSI information. You need the following information from the list when you connect the instance to the volume.
- IP address
- CHAP user name and password (if enabled)
The CHAP credentials are auto-generated by the system and cannot be changed. They are also unique to their assigned volume/instance pair and cannot be used to authenticated another volume/instance pair.
The Console provides this information on the details page of the volume's attached instance. Click the Actions icon (three dots) on your volume's row, and then click iSCSI Information. The system also returns this information when the
AttachVolume API operation completes successfully. You can re-run the operation with the same parameter values to review the information.
iSCSI attached volumes for Linux-based images are managed by the Linux iSCSI initiator service, iscsid. Oracle Cloud Infrastructure images use iSCSI default settings for the iscsid service's parameters, with the exception of the following parameters:
node.startup = automatic
node.session.timeo.replacement_timeout = 6000
node.conn.timeo.noop_out_interval = 0
node.conn.timeo.noop_out_timeout = 0
node.conn.iscsi.HeaderDigest = None
If you are using custom images, you should update the iscsid service configuration by modifying the
There is a wealth of information on the internet about iSCSI and CHAP. If you need more information on these topics, try the following pages: