The image shows the virtual cloud network (VCN) topology used in a Workload Expansion version of this architecture. It depicts an OCI region containing a single network compartment. Within the compartment are three fault domains. Spanning these fault domains is a VCN, subdivided into three subnets:

• A public subnet.
• A private subnet for the bastion service.
• A private subnet for shared services.
• Private subnets for:
  • Workload -A
  • Workload -A database
  • Workload -B
  • Workload -B database
  • Workload -C
  • Workload -C database

Access to the VCN is though either a Dynamic Routing Gateway, an Internet Gateway, a NAT Gateway, or a Service gateway.