This image shows two identical OCI regions, labeled OCI Region 1 and OCI Region 2. Each region contain a single availability domain (AD), spanned by a VCN, and an Object Storage instance. The VCN in each region contains two public subnets,and one private subnet. These regions are connected through remote peering.

The public subnets both OCI regions are labeled Public LBR. They each contain a bastion service within the AD. Access is controlled by Cloud Guard and a security list.

The other public subnet in OCI region 1 is labeled Primary OAC; in OCI region 2 it's labeled Secondary OAC. Both subnets contain an OAC instance within the AD. Access is controlled by Cloud Guard and a security list.

The private subnet in OCI region 2 is labeled Primary DB; in OCI region 2 it's labeled Standby DB. Both subnets contain a database instance within the AD. Access is controlled by Cloud Guard and a security list.

The image shows that users access OCI region 1 through a domain name service (DNS). A dotted line indicates an identical, alternate route to OCI region 2. In both cases, traffic then enters the VCN through an Internet Gateway, which routes traffic around the Public LBR subnet and on into the OAC instance in the primary OAC subnet and then finally stored in the primary DB subnet and a snapshot of the transaction is taken and passed into object storage.

The snapshot in the region 1 object storage can be replicated to the region 1 object storage, which restores the snapshot and forwards it to the OCI region 2 OAC instance.