Oracle Cloud Infrastructure (OCI) Architecture Explained

Key Concepts

• Regions and Availability Domains
• Virtual Cloud Network (VCN)
• Compute Instances
• Block Storage and Object Storage
• Identity and Access Management (IAM)

Regions and Availability Domains

Regions in OCI are geographical areas where Oracle has deployed data centers. Each region is isolated from other regions to ensure fault tolerance and stability. Within each region, there are multiple Availability Domains (ADs). An AD is a group of data centers that are connected to each other with low-latency, high-bandwidth networks. This setup ensures high availability and fault tolerance by distributing resources across multiple ADs.

For example, if you deploy a web application in the US West region, you can choose to distribute your resources across three different ADs to ensure that your application remains operational even if one AD experiences an outage.

Virtual Cloud Network (VCN)

A Virtual Cloud Network (VCN) is a software-defined network that you can create in OCI. It allows you to control your network topology, including IP address ranges, subnets, route tables, and security lists. A VCN is similar to a traditional on-premises network but with the added benefits of scalability and flexibility.

Think of a VCN as a virtual office building where you can define different rooms (subnets) for different departments (services). You can control who can enter each room (security lists) and how traffic flows between rooms (route tables).

Compute Instances

Compute instances in OCI are virtual machines that you can create and manage. You can choose from a variety of shapes (configurations) that determine the CPU, memory, and networking capabilities of the instance. Compute instances are the building blocks of your cloud infrastructure, allowing you to run applications, databases, and other workloads.

Imagine a compute instance as a virtual server that you can customize to meet the specific needs of your application. You can choose the right shape to balance performance and cost, and you can scale up or down as needed.

Block Storage and Object Storage

Block Storage in OCI provides high-performance, low-latency storage for your compute instances. It is ideal for applications that require fast access to data, such as databases. Object Storage, on the other hand, is designed for storing large amounts of unstructured data, such as images, videos, and backups. Object Storage is highly scalable and durable, making it suitable for data that does not require frequent access.

Think of Block Storage as a high-speed SSD drive that you attach to your virtual server, while Object Storage is like a massive, secure warehouse where you can store and retrieve any type of file.

Identity and Access Management (IAM)

Identity and Access Management (IAM) in OCI allows you to control who has access to your cloud resources and what actions they can perform. IAM provides features such as users, groups, policies, and compartments to help you manage access to your cloud environment securely.

Consider IAM as the security guard of your cloud environment. It ensures that only authorized users can access specific resources and perform certain actions, protecting your data and applications from unauthorized access.