This image shows how to ensure high availability by setting up VPN connection availability within your internal network to use static routes through multiple redundant IPSec tunnels. It shows a customer premises containing a Private Host connected to two Edge devices (Edge 1 and Edge 2). The customer premises exchanges traffic to and from Oracle Cloud Infrastructure over Internet connections through Virtual Private Network Headends 1 and 2.

Bidirectional arrows indicate that traffic flows as follows:

Between Edge 1 and VPN Headend 1 through VPN Tunnel 1.
Between Edge 1 and VPN Headend 2 through VPN Tunnel 2.
Between Edge 1 and both VPN Headends through a virtual circuit (VC) over FastConnect.
Between Edge 2 and the Dynamic Routing Gateway through a VC over FastConnect. Edge 2 traffic is not passed through either VPN Headend.

These VPNs are connected to the Oracle Cloud Infrastructure Virtual Cloud Network (VCN) through a Dynamic Routing Gateway labeled Dynamic Routing Headend. Within this VCN, labeled VCN 10.40.0.0/16 is a Public Subnet, containing a virtual machine, and two Private Subnets.