This image shows an on-premises university campus network connected to 2 Oracle Cloud Infrastructure (OCI) regions: an active region in Ashburn and a disaster recovery (DR) region in Phoenix connected by remote peering. The on-premises network includes a secure login portal that uses Active Directory for faculty and student traffic and uses site-to-site VPN to connect to the regions. Internet users connect to the active region by using a Oracle Cloud Infrastructure Web Application Firewall and an internet gateway to access a Bastion host.

Each region provides 3 availability domains (AD) and the following services:

Oracle Cloud Infrastructure Bastion
Oracle Cloud Infrastructure File Storage
Oracle Cloud Infrastructure Functions
Oracle Cloud Infrastructure Object Storage
Oracle Cloud Infrastructure Resource Manager
Oracle Database Zero Data Loss Autonomous Recovery Service
Oracle Key Management Cloud Service
Oracle Cloud Observability and Management Platform

Each region provides 1 VCN protected by Oracle Cloud Guard and maximum security zones and with the following gateways:

Dynamic routing gateway (DRG): Provides private connectivity between on-premises networks and VCNs by using Site-to-Site VPN or FastConnect. A DRG can also route traffic between VCNs for remote peering.
Internet gateway: Provides communications between public subnets and internet hosts.
Service gateway: VCNs communicate with services such as object storage over the Oracle network fabric without traversing the internet.

Active region VCN: Provides 5 subnets, each with its own security list and route table.

Bastion public subnet: Provides Bastion host instance in AD1 for authorized access.
Load balancer public subnet: Provides Bastion host instances in AD1 and AD2.
Application private subnet: Provides compute instances with specific services including in each of the availability domains. Application data is replicated to the associated application subnet in the disaster recovery region.
- AD1: Degree Works app 1, Banner self service (admin) 1, Aviso retention 1, Envisions, and AppXtender
- AD2: Banner self service (student) 1, Banner self service (student reg) 1, Aviso retention 2, Automic app manager, OEM, and Banner events publisher
- AD3: Banner self service (student) 2, Banner self service (student reg) 2, Banner self service (admin) 2, Degree Works app 2, Banner (workflow), Banner (job submission), and Banner (recruiter integration manager, Flywire, Connect)
Common services private subnet: Provides compute instances with specific services including Ellucian Ethos and Banner Solution Manager.
Database private subnet: Provides Oracle Database Enterprise Edition databases for with transparent data encryption (TDE) for Degree Works, Automic, Ethos, and Banner. Each provides an active and a standby instance in different ADs connected by Oracle Data Guard. Data is replicated to the associated database subnet in the disaster recovery region using Oracle Data Guard.

Disaster recovery region VCN: Provides 4 subnets, each with its own security list and route table.

Bastion public subnet: Provides Bastion host instance in AD1 for authorized access.
Application private subnet: Provides compute instances with specific services including in each of the availability domains:
- AD1: Degree Works app, Aviso retention, Envisions, and AppXtender
- AD2: Rackware, Banner admin, and Banner events publisher
- AD3: Banner self service (student), Banner self service (student reg), Banner (workflow), Banner (job submission), Banner (recruiter integration manager, Flywire, Connect)
Common services private subnet: Provides compute instances with specific services including Ellucian Ethos and Banner Solution Manager.
Database private subnet: Provides Oracle Database Enterprise Edition databases for with transparent data encryption (TDE) for Ethos and Banner DBs in AD1, Atomic DB in AD2, and Degree Works in AD3.