This image shows an architecture consisting of a single availability domain, deployed within a VCN on Oracle Cloud Infrastructure. Within the VCN are four subnets, each with a Security List and Route Table:

• A public subnet containing an API Gateway
• A private subnet containing a Load Balancer
• A private subnet containing a deployment of Oracle Cloud Infrastructure Container Engine for Kubernetes, with three Worker Nodes. The OKE cluster is using Service Mesh
• A private subnet containing Oracle Autonomous Database

Users access content through the Public Internet, which access Oracle Cloud Infrastructure Identity and Access Management (OCI IAM) for user authetication. Data is sent through Oracle Cloud services including DNS, WAF, and DDoS protection, before passing through an Internet Gateway for the VCN and then to the API Gateway.

Static content such as images and HTML5 pages is also available through a CDN (outside Oracle Cloud) which connects to Oracle Cloud Infrastructure Object Storage.