The image shows two OCI regions side-by-side amd below them an on-premises group. One OCI region is labeled the primary region and is located in Mumbai. The other region is labeled DR region and is located in Hyderabad.

The primary region contains two VCNs (VCN A and VCN B) and an Oracle Services Network implementation. VCN A contains three subnets:

A JDE app subnet, containing a web server, application interface server and an enterprise server.
A JDE management subnet, containing of a server manager console and a deployment server.
A JDE load balancer subnet, containing a load balancer for JDE applications.

Access to VCN A is through either a NAT gateway or a service gateway. Access to each subnet is controlled by a security list. VCN A also includes an OCI Object Storage instance and a database private endpoint, through which traffic between the subnets terminates.

Within VCN B is a single public subnet containing a bastion server. This subnet is accessible through an internet gateway. The OSN implemention contains a single instance of Oracle Autonomous Database Serverless, which is labeled "Primary".

The OCI DR region contains a single VCN and an OSN implementation. VCN C contains three subnets:

A JDE app disaster recovery subnet, containing a web server, application interface server and an enterprise server.
A JDE management disaster recovery subnet, containing of a server manager console and a deployment server.
A JDE load balancer subnet, containing a load balancer for JDE applications.

Access to each subnet is controlled by a security list. Access to VCN B itself is through an internet gateway.

The VCN also contains an OCI Object Storage instance and a database private endpoint, through which traffic between the subnets terminates. The OSN implement ion contains a single instance of Oracle Autonomous Database Serverless, which is labeled "DR".

The on-premises group contains a user group, with a customer-supplied gateway to provide access.

Traffic flows between VCN A and VCN B through a dynamic routing gateway. It also flows between the VCNs A and B through the DRG, across a remote peering network to a DRG on VCN C to allow communication between all three VCNs. Traffic also flows bidirectionally between VCN A and the OSN implementation. Traffic between the OSN implementations in each region is controlled by Data Guard.

The regions themselves communicate over OCI Interconnect.

Users in the on-premises site communicate with the regions through their own gateway and then over a site-to-site VPN, which VPN depending up whether they are accessing the primary region or are in a disaster recovery mode, in which they access the DR region.