This image shows a Oracle Cloud Infrastructure region with a single availability domain and a virtual cloud network (VCN) labeled 10.0.0.0/16.

The VCN has the following networking components:

• A public subnet, 10.0.1.0/24.

• Two private subnets, 10.0.3.0/24 and 10.0.4.0/24.

• A dynamic routing gateway for private connections from the customer's data center through IPSec VPN or FastConnect.

• An internet gateway for public access to the applications.

• A load balancer to distribute traffic to the application VMs.

• A service gateway for private access from from the VCN to the object storage service.

The architecture contains the following compute instances:

• A bastion attached to the public subnet.

• Three training nodes distributed across the three fault domains in the availability domain and attached to the private subnet, 10.0.3.0/24.

• An inference server attached to the private subnet, 10.0.3.0/24.

• Two application VMs distributed across fault domains and attached to the private subnet, 10.0.3.0/24.

The compute instances have access to the following storage resources:

• The training nodes have shared access to three block volumes for high-speed local storage.

• The inference server has access to the shared block volumes and to file storage.

• The application VMs can read from the shared file storage.