Does this tool connect to my OCI account?

No. This tool runs entirely in your browser and generates configuration JSON that you can copy and paste into your infrastructure-as-code templates, CLI commands, or cloud console. It never connects to any cloud account or sends data externally.

Are the generated configurations production-ready?

The tool produces syntactically valid configurations based on current OCI service specifications. Always review generated configs against your organization security policies and test in a non-production environment before deploying.

OCI Network Load Balancer Builder

NetworkingOCI

Build Network Load Balancer backend set, listener, and health check configurations.

Last verified: May 2026

OCI Network Load Balancer Configuration

Build Network Load Balancer backend set, listener, and health check configurations for Layer 4 traffic.

Required Fields

compartmentIddisplayNamesubnetIdlistenersbackendSets

{
  "compartmentId": "ocid1.compartment.oc1..aaaaaaaexample",
  "displayName": "prod-network-lb",
  "subnetId": "ocid1.subnet.oc1.iad.aaaaaaaexample",
  "isPrivate": false,
  "isPreserveSourceDestination": false,
  "nlbIpVersion": "IPV4",
  "listeners": {
    "tcp-443": {
      "name": "tcp-443",
      "protocol": "TCP",
      "port": 443,
      "defaultBackendSetName": "prod-backend-set"
    },
    "tcp-80": {
      "name": "tcp-80",
      "protocol": "TCP",
      "port": 80,
      "defaultBackendSetName": "prod-backend-set"
    },
    "udp-514": {
      "name": "udp-514",
      "protocol": "UDP",
      "port": 514,
      "defaultBackendSetName": "syslog-backend-set"
    }
  },
  "backendSets": {
    "prod-backend-set": {
      "policy": "FIVE_TUPLE",
      "isPreserveSource": true,
      "backends": [
        {
          "name": "web-server-1",
          "ipAddress": "10.0.1.10",
          "port": 443,
          "weight": 1,
          "isBackup": false,
          "isDrain": false,
          "isOffline": false
        },
        {
          "name": "web-server-2",
          "ipAddress": "10.0.1.11",
          "port": 443,
          "weight": 1,
          "isBackup": false,
          "isDrain": false,
          "isOffline": false
        }
      ],
      "healthChecker": {
        "protocol": "TCP",
        "port": 443,
        "intervalInMillis": 10000,
        "timeoutInMillis": 3000,
        "retries": 3
      }
    },
    "syslog-backend-set": {
      "policy": "TWO_TUPLE",
      "isPreserveSource": true,
      "backends": [
        {
          "name": "syslog-server-1",
          "ipAddress": "10.0.2.20",
          "port": 514,
          "weight": 1
        }
      ],
      "healthChecker": {
        "protocol": "UDP",
        "port": 514,
        "intervalInMillis": 30000,
        "timeoutInMillis": 5000,
        "retries": 3
      }
    }
  },
  "networkSecurityGroupIds": ["ocid1.networksecuritygroup.oc1.iad.aaaaaaaexample"],
  "freeformTags": {
    "environment": "production",
    "team": "networking"
  }
}

Generated Output

Output will appear here...

About This Tool

Build Network Load Balancer backend set, listener, and health check configurations. This tool helps OCI engineers generate valid configurations quickly without consulting documentation, reducing errors and accelerating infrastructure deployment. All processing runs in your browser with no data sent to external servers.

Real-World Scenario

Your team is running a high-throughput TCP service (real-time data ingestion) currently behind a standard OCI Load Balancer. The builder shows: standard LB with 1 Gbps shape costs $200/month + processing fees; NLB at the same throughput costs ~$30/month. Migration plan: deploy NLB with TCP listener, update DNS to point clients to the NLB, retire the old LB after validation. Net savings: $170/month. NLB also delivers lower latency (closer to wire-speed) which improves p99 latency by ~10ms for the latency-sensitive workload.

When to Use This Tool

•Generating oci network load balancer configurations for new infrastructure deployments.
•Validating existing configurations against best practices before applying changes.
•Learning OCI service configuration patterns through interactive examples.
•Accelerating infrastructure-as-code development by producing correct JSON/YAML starting points.

Pro Tips

TIP

Network Load Balancer (Layer 4) preserves source IP by default — critical for IP-based access control or geo-IP analytics. The Application Load Balancer (Layer 7) replaces source IP with the LB's IP unless you enable XFF headers and configure your app to trust them.

TIP

NLB is dramatically cheaper than the standard OCI Load Balancer for high-throughput TCP/UDP workloads. NLB charges per GB processed; standard LB charges flat for the bandwidth shape. For sustained high-throughput patterns, NLB cost-effectively scales.

TIP

Use IPv6 dual-stack on NLB for modern infrastructure. Configure both IPv4 and IPv6 listeners; the NLB handles the protocol bridging to backends. Future-proof your architecture without forcing application changes.

How It Works Under the Hood

The builder constructs OCI Network Load Balancer configurations: NLB resource (compartment, VCN, subnet, public/private), listeners (port + protocol: TCP/UDP, optional TLS termination), backend sets (load balancing policy: 5-tuple-hash / 3-tuple-hash, health check config: TCP/HTTP probe with interval/timeout/threshold, backends: instance OCIDs or IP addresses with weights). Output is generated as oci nlb network-load-balancer commands and Terraform oci_network_load_balancer_network_load_balancer + oci_network_load_balancer_backend_set resources.

Frequently Asked Questions

Does this tool connect to my OCI account?: No. This tool runs entirely in your browser and generates configuration JSON that you can copy and paste into your infrastructure-as-code templates, CLI commands, or cloud console. It never connects to any cloud account or sends data externally.
Are the generated configurations production-ready?: The tool produces syntactically valid configurations based on current OCI service specifications. Always review generated configs against your organization security policies and test in a non-production environment before deploying.

Related Learning Guides

OCI VCN Networking Deep Dive25 min read
OCI DNS & Traffic Management22 min read

Was this tool helpful?

Disclaimer: This tool runs entirely in your browser. No data is sent to our servers. Always verify outputs before using them in production. AWS, Azure, and GCP are trademarks of their respective owners.