The image shows an OCI region, containing three VCNs and five OCI services: Policies, IDCS, Auditing, Logging, and Object Storage.

• The first VCN contains subnet A, which includes a dynamic routing gateway (DRG), two public load balancers in an availability domain, as well as an internet gateway, a web application firewall (WAF), and a security gateway (SG-0).
• The second VCN contains subnet B, which includes two HA proxies in the availability domain, and subnet C, which includes four application servers in the availability domain, and a security gateway (SG-1).
• The third VCN contains subnet D, which includes an Exadata database in the availability domain, and a security gateway (SG-2).

Customer premises equipment connects, via FastConnect, to the DRG in the first VCN. The DRG also connects to the first public load balancer and the other two VCNs. The both public load balancers connect to the two HA proxies. Each HA proxy connect to the four application servers. All four application servers connect to the Exadata database.

The second public load balancer also connects to clients on the internet via the WAF and internet gateway; it also connects to SG-0 (all three SGs are connected to each other). SG-2 also connects to object storage, which connects to object storage disaster recovery.