OCI hub-spoke network in us-ashburn-1 region with DRG v2 routing four attachments: a central Hub VCN, Production and Development Spoke VCNs, and hybrid on-premises connectivity via FastConnect 10Gbps and IPsec VPN backup. Internet-facing traffic flows through Internet Gateway, WAF Policy, and OCI Load Balancer to Instance Pools in the Production spoke, while NAT and Service Gateways enable outbound and managed service access. DRG Route Tables enforce hub-to-spoke and spoke-to-hub routing with network segmentation via Security Lists and Network Security Groups. This architecture demonstrates OCI best practices for multi-region scalability, high availability, and secure hybrid cloud integration. Fork and customize this diagram on Diagrams.so to adapt CIDR blocks, add additional spokes, or modify routing policies for your environment.