This image shows an Oracle Cloud Infrastructure (OCI) region and 1 virtual cloud network (VCN) that includes an Oracle Cloud VMware Solution software defined data center (SDDC).

The region provides the following services:

Oracle Cloud Infrastructure Audit
Oracle Cloud Infrastructure Block Volumes service with multiple block volume instances
Oracle Cloud Infrastructure Domain Name Service (DNS)
Oracle Cloud Infrastructure File Storage
Oracle Cloud Infrastructure Identity and Access Management
Oracle Cloud Infrastructure Monitoring
Oracle Cloud Infrastructure Object Storage

The VCN provides the following gateways:

Dynamic routing gateway (DRG): Provides private connectivity between on-premises networks and VCNs by using Site-to-Site VPN or FastConnect.
Internet gateway: Provides communications between public subnets and internet hosts. This architecture also includes Oracle Cloud Infrastructure Web Application Firewall for traffic that comes in through the internet gateway.
Network address translation (NAT) gateway: Enables private resources in a VCN to access hosts on the internet, without exposing those resources to incoming internet connections.
Service gateway: VCNs communicate with services such as object storage over the Oracle network fabric without traversing the internet.

The VCN provides 3 subnets, each with its own security list and route table.

A public subnet includes a firewall, Oracle Cloud Infrastructure Bastion, and primary and standby load balancers.
A private subnet includes a database instance.
A provisioning subnet provides multiple bare metal ESXi instances.

The Oracle Cloud VMware Solution software defined data center (SDDC) spans the provisioning subnet and includes:

vCenter server, NSX-T, and HCX instances
An NSX overlay provided by an NSX Edge server with multiple virtual machine and database instances
A VMware Hypervisor to interface with the provisioning subnet
A management VMFS datastore instance
Multiple workload VMFS datastore instances