📊 Draw.io

Draw.io (now known as app.diagrams.net) is a free, web-based diagramming tool widely used to create architecture diagrams, network designs, and workflows.

🔹 Role of Draw.io in OCI In Oracle Cloud Infrastructure (OCI), Draw.io is commonly used for:

Designing cloud architecture diagrams

Visualizing network topology (VCN, subnets, gateways)

Documenting compartment structure

Creating security and IAM flow diagrams

Representing compute, storage, and load balancing setups

🔹 Key Features

✅ Drag-and-drop interface for easy diagram creation

✅ Pre-built cloud icons (including OCI shapes)

✅ Supports VCN, subnets, load balancers, databases, etc.

✅ Can export diagrams as PNG, PDF, or XML

✅ Integrates with tools like Google Drive, GitHub, and Confluence

🔹 How It’s Used in OCI Projects

Architecture Planning Before deployment, engineers design the OCI setup (VCN, subnets, compute instances).

Documentation Diagrams are added to project documentation or wiki pages.

Collaboration Teams use diagrams to communicate infrastructure design clearly.

🔹 Example Use Case A typical OCI architecture diagram in Draw.io may include:

VCN (Virtual Cloud Network)

Public and Private Subnets

Internet Gateway / NAT Gateway

Compute Instances

Load Balancer

Object Storage

🔹 Benefits

Improves visual understanding of complex cloud setups

Helps in troubleshooting and planning

Ensures standardized documentation in teams

🔹 Conclusion Draw.io is an essential tool for OCI users to design, visualize, and document cloud infrastructure, making it easier to understand and manage complex architectures.

Component	Function	Direction
Internet Gateway (IGW)	Connects the VCN to the internet.	Bidirectional (Inbound/Outbound)
NAT Gateway	Allows private resources to access the internet.	Outbound-Only
Service Gateway	Connects the VCN to OCI services (like Object Storage) privately.	Internal OCI Network

Internet to Web Server: Traffic enters through the IGW to the Public IP of the Web Server.

Web Server to Database: Traffic moves internally using Private IPs (10.0.1.x to 10.0.2.x).

Database to Internet: If the DB needs an update, it sends a request through the NAT Gateway.