This image shows two identical OCI regions, labeled OCI Region 1 and OCI Region 2. Each region contain a single availability domain, spanned by a VCN, and an Object Storage instance. The VCN in each region contains one public subnet,and two private subnets. These regions are connected through remote peering.

The public subnets both OCI regions are labeled Public LBR. They each contain a bastion service outside the AD and a load balancer within the AD. Access is controlled by Cloud Guard and a security list.

One private subnet in OCI region 1 is labeled Primary OAC; in OCI region 2 it's labeled Secondary OAC. Both subnets contain an OAC instance within the AD. Access is controlled by Cloud Guard and a security list.

The other private subnet in OCI region 2 is labeled Primary DB; in OCI region 2 it's labeled Standby DB. Both subnets contain a database instance within the AD. Access is controlled by Cloud Guard and a security list.

The image shows that users access OCI region 1 through a domain name service (DNS). A dotted line indicates an identical, alternate route to OCI region 2. In both cases, traffic then enters the VCN through an Internet Gateway, which passes it in to the WAF in the AD. The WAF routes traffic into the Public LBR subnet's load balancer, from which it travels into the OAC instance in the primary OAC subnet and then finally stored in the primary DB subnet and a snapshot of the transaction is taken and passed into object storage.

The snapshot in the region 1 object storage can be replicated to the region 1 object storage, which restores the snapshot and forwards it to the OCI region 2 OAC instance.