This image shows an Oracle Cloud Infrastructure region, containing a single availability domain (AD), which comprises a pair of fault domains. A virtual cloud network (VCN) spans the region, AD and both fault domains. Within the VCN, there are two subnets, one public and one private.

• The public subnet contains, in each fault domain, a Remote Desktop network load balancer and a Remote Desktop gateway load balancer. The load balancers in fault domain 1 are active whereas those in Fault Domain 2 are passive.
• The private subnet contains backend services for Remote Desktop web and Remote Desktop gateway services, one in each fault domain. It also contains, in each fault domain:
  • An active desktop
  • A Remote Desktop connection broker
  • A Remote Desktop shell for both the desktop and the app

Access to both subnets is controlled by a security list and routing table.

Users access the public subnet through the VCN via an Internet gateway and their traffic is directed to one of the active network load balancers, which, in turn, direct that traffic to the backend service in fault domain 1. The customer's data center uses FastConnect to access the VCN through a dynamic routing gateway (DRG).