This image shows an on-premises university campus network connected to 2 Oracle Cloud
Infrastructure (OCI) regions: an active region in Ashburn and a disaster recovery (DR) region in Phoenix connected by remote peering. The
on-premises network includes a secure login portal that uses Active Directory for faculty and student traffic and uses site-to-site
VPN to connect to the regions. Internet users connect to the active region by using a Oracle Cloud Infrastructure Web
Application Firewall and an internet gateway to access a Bastion host.
Each region provides 3 availability domains (AD) and the following services:
- Oracle Cloud
Infrastructure Bastion
- Oracle Cloud Infrastructure File
Storage
- Oracle Cloud Infrastructure
Functions
- Oracle Cloud
Infrastructure Object Storage
- Oracle Cloud Infrastructure Resource
Manager
- Oracle Database Zero Data Loss Autonomous Recovery Service
- Oracle Key Management Cloud
Service
- Oracle Cloud Observability and Management Platform
Each region provides 1 VCN protected by Oracle Cloud Guard and maximum security zones and with the following gateways:
- Dynamic routing gateway (DRG): Provides private connectivity between on-premises networks and VCNs by using Site-to-Site
VPN or FastConnect. A DRG can also route traffic between VCNs for remote peering.
- Internet gateway: Provides communications between public subnets and internet hosts.
- Service gateway: VCNs communicate with services such as object storage over the Oracle network fabric without traversing the
internet.
Active region VCN: Provides 5 subnets, each with its own security list and route table.
- Bastion public subnet: Provides Bastion host instance in AD1 for authorized access.
- Load balancer public subnet: Provides Bastion host instances in AD1 and AD2.
- Application private subnet: Provides compute instances with specific services including in each of the availability domains.
Application data is replicated to the associated application subnet in the disaster recovery region.
- AD1: Degree Works app 1, Banner self service (admin) 1, Aviso retention 1, Envisions, and AppXtender
- AD2: Banner self service (student) 1, Banner self service (student reg) 1, Aviso retention 2, Automic app manager, OEM, and
Banner events publisher
- AD3: Banner self service (student) 2, Banner self service (student reg) 2, Banner self service (admin) 2, Degree Works app
2, Banner (workflow), Banner (job submission), and Banner (recruiter integration manager, Flywire, Connect)
- Common services private subnet: Provides compute instances with specific services including Ellucian Ethos and Banner Solution
Manager.
- Database private subnet: Provides Oracle Database Enterprise Edition databases for with transparent data encryption (TDE) for Degree Works, Automic, Ethos, and Banner. Each
provides an active and a standby instance in different ADs connected by Oracle Data Guard. Data is replicated to the associated
database subnet in the disaster recovery region using Oracle Data Guard.
Disaster recovery region VCN: Provides 4 subnets, each with its own security list and route table.
- Bastion public subnet: Provides Bastion host instance in AD1 for authorized access.
- Application private subnet: Provides compute instances with specific services including in each of the availability domains:
- AD1: Degree Works app, Aviso retention, Envisions, and AppXtender
- AD2: Rackware, Banner admin, and Banner events publisher
- AD3: Banner self service (student), Banner self service (student reg), Banner (workflow), Banner (job submission), Banner
(recruiter integration manager, Flywire, Connect)
- Common services private subnet: Provides compute instances with specific services including Ellucian Ethos and Banner Solution
Manager.
- Database private subnet: Provides Oracle Database Enterprise Edition databases for with transparent data encryption (TDE) for Ethos and Banner DBs in AD1, Atomic DB in AD2,
and Degree Works in AD3.