The image shows an OCI Region with a VCN, a public subnet, and 2 private subnets. The VCN has an internet gateway and a service gateway.

Two-way communication occurs between access public subnet compute and the internet gateway and between the internet gateway and an HTTP file server in the public subnet.

The first private subnet (10.0.1.0/24) has clients, each is a VTAP source. Client download files from the server and using VTAP send the mirrored traffic (VXLAN) through port 4789 to an OCI Network Load Balancer in the second private subnet (10.0.2.0/24). A Network Load Balancer backend set includes multiple VTAP Sinks. In this example, VTAP Sink 0, VTAP Sink 1, and VTAP Sink #m. The OCI Network Load Balancer backend nodes capture the mirrored traffic from the VTAP sources and upload it to a bucket in OCI Object Storage through a Service Gateway.

This reference architecture diagram is further described in the surrounding text.