← Back to Projects
Business Systems House (BSH) / Confidential Enterprise Client 2026

OCI Multi-Region Disaster Recovery & Cloud Infrastructure Migration

OCI Multi-Region Disaster Recovery & Cloud Infrastructure Migration
Oracle Cloud Infrastructure (OCI) FortiGate VM IPsec VPN VCN/Subnet CIDR Architecture Dynamic Routing Gateway (DRG) Custom Linux Images Serial Console Debugging

\

OCI Multi-Region Disaster Recovery & Cloud Infrastructure Migration

\

Problem & Context

\

\ The client required a resilient, geo-redundant disaster recovery posture to transition critical enterprise workloads from on-premises infrastructure to cloud-native environments. The primary technical requirement was deploying and interconnecting multi-region landing zones (OCI Dubai and Frankfurt) while maintaining continuous security policy enforcement and strict network segmentation.

\

\

Technical Solution & Architecture

\

\ Designed a hub-and-spoke Virtual Cloud Network (VCN) topology across Dubai and Frankfurt OCI regions. Exported custom on-premises virtual disk images, imported them to OCI Object Storage, and provisioned tailored compute shapes. Configured Dynamic Routing Gateways (DRGs), Remote Peering Connections (RPCs), and custom OCI Route Tables to establish seamless inter-region communication and traffic redirection through centralized FortiGate Next-Generation Firewalls.

\

\

Key Contributions & Engineering Decisions

\

    \

  • Custom Disk Image Conversion: Exported and converted VM boot volumes, resolving boot loader and block storage driver incompatibilities using OCI Cloud Shell and serial console diagnostics.
  • \

  • Network CIDR Design: Planned non-overlapping IPv4 CIDR blocks across Hub, Production, Non-Production, and Management subnets across both regions.
  • \

  • Site-to-Site IPsec VPN Tunnels: Provisioned redundant IPsec VPN tunnels with automated failover between OCI DRGs and FortiGate appliances.
  • \

\

Outcome & Impact

\

\ Successfully achieved sub-hour Recovery Time Objective (RTO) for mission-critical services during failover testing, ensuring high availability, zero data loss, and complete compliance with enterprise regulatory standards.

\

ROOT ACCESS GRANTED