This image shows an Oracle Cloud Infrastructure tenancy enclosing a region with a single availability domain and 3 fault domains. The region provides two virtual cloud networks (VCNs), each in their own compartment. Compartments cross all regions in a tenancy. The tenancy provides Cloud Guard protection across the tenancy.

VCN 10.0.0.0/16 (Compartment A): Contains 3 regional public subnets arranged as functional tiers. Each subnet provides a route table and a security list.

• The VCN provides the following features and gateways:

  • Cloud Guard protection for the compartment
  • An internet gateway
  • A local peering gateway (LPG) for communication between VCNs in the same regions using private IP addresses

• Load Balancing Tier 1 - regional public subnet 1 (10.0.1.0/24): Active and standby load balancers manage traffic to the application VMs. An internet gateway provides a public connection to the load balancers.

• Bastion Host Tier - regional public subnet 2 (10.0.2.0/24): A bastion host node resides in fault domain 1 and manages traffic to Database Tier. An internet gateway provides a public connection to the B

• Application Tier - regional private subnet (10.0.3.0/24): A Spring Boot application node resides in fault domain 1,2, and 3.

VCN 192.168.0.0/16 (Compartment B): Contains 1 regional private subnet. Each subnet provides a route table and a security list.

• The VCN provides the following features and gateways:

  • Cloud Guard and Security Zone protection for the compartment
  • A local peering gateway (LPG) for communication between VCNs in the same regions using private IP addresses

• Database Tier - regional private subnet (192.168.1.0/24): MySQL Database Service resides in fault domain 2.