This image shows the architecture for an external application makeing public webservice API calls through the public internet, protected by a VPN, to UBGU SaaS in a VCN in an OCI region.

The image contains two elements,

• The customer's on-premises private network, which comprises the customer's on-premises applications and their network firewall.
• An Oracle Cloud Infrastructure implementation, within which resides an Oracle Utilities Cloud Service VCN and its SaaS public endpoint (which is on a public IP).

Traffic from the customer's on-premises private network goes through the firewall to the SaaS public endpoint by using public Internet transit routing and is returned to the customer's on-premises private network over the HTTPS protocol to a public IP.