Home / Journal / OCI Architecture / OCI Reference Architectures Walkthrough
OCI Architecture

OCI Reference Architectures Walkthrough

Every team starting on OCI faces the same temptation, to invent the architecture from scratch. Reference architectures are proven blueprints for common workloads that you can adopt rather than rediscover.

Published Oct 9, 2024 · OCI Specialists · 10 min read
OCI Reference Architectures Walkthrough

Every team that starts building on OCI faces the same temptation, which is to invent the architecture from scratch as if no one had ever built a three tier application or a resilient database tier before. They have, many times, and the patterns that work have been distilled into reference architectures, which are proven blueprints for common workloads that you can adopt rather than rediscover. This article walks through what reference architectures are, why they are worth starting from, and how to adapt them to a real estate without losing the value they carry.

A reference architecture is not a product you deploy. It is a documented pattern, a diagram and a description of how components fit together to solve a recurring problem well, capturing decisions that someone else already paid to learn. Starting from one does not remove the need to think, but it changes what you are thinking about, from inventing a structure to adapting a sound one, which is a far better use of effort. The sections below cover the main families of reference architecture and how to use them, building on the foundations in OCI Landing Zone and Architecture: A Complete Guide and the principles in OCI Well Architected Framework Explained.

Why start from a reference architecture

The argument for reference architectures is simple, which is that the common problems have common good answers, and rediscovering them is slow and error prone. A team designing a resilient web application tier from nothing will spend weeks arriving at a structure that a reference architecture would have given them on day one, and they will probably arrive at a worse version of it, because they have not yet hit the failure modes that shaped the reference. Starting from the reference lets you spend your design effort on what is genuinely specific to your workload rather than on reinventing the parts that are not.

Workload typeWhat the reference architecture provides
Web applicationLoad balanced compute tier across availability domains with a managed database behind it
Resilient databasePrimary and standby placement, replication and failover structure
Hub and spoke networkCentral hub for shared services with isolated workload spokes
Containerised applicationManaged Kubernetes with load balancing, scaling and storage integration
Hybrid connectivitySecure connection between on premises and OCI with routing and redundancy
A reference architecture is decisions someone already paid to learn. Starting from one means spending your effort on what is genuinely specific to you.

The web application reference architecture

The most common reference architecture is the resilient web application, and it captures the pattern of a load balancer distributing traffic across a compute tier that spans availability domains, with a managed database behind it that has its own redundancy. It embodies most of the availability principles in Designing for High Availability on OCI, presented as a ready made structure. The value of having it as a reference is that the placement decisions, which tier spans which domains, where the state lives, how health checks drive failover, are all made for you, so you adapt rather than invent.

The resilient database reference architecture

Database reference architectures capture how to place a primary and a standby for resilience, how replication flows between them, and how failover is structured so that the loss of the primary does not become the loss of the data. Because the database tier is usually the hardest part of any design, a reference architecture here is especially valuable, because it encodes hard won knowledge about replication, failover and recovery objectives that is genuinely difficult to get right from scratch. Adapting it to your specific database and recovery requirements is far easier than designing the resilience pattern yourself.

Network reference architectures

Networking reference architectures, particularly hub and spoke, give you proven topologies for connecting many networks at scale, as covered in Hub and Spoke Networking on OCI. These are valuable because networking mistakes are expensive to unpick once an estate has grown, so starting from a topology that scales cleanly saves you from the painful rework of having grown an unmanageable mesh. The reference gives you the address planning discipline and the routing structure that make the network scale by adding spokes rather than multiplying connections.

How to adapt a reference without losing its value

The risk with reference architectures is that teams either follow them too literally, forcing a workload into a pattern that does not fit, or deviate from them so heavily that they lose the value the reference carried. The skill is in understanding why the reference is shaped the way it is, so that when you adapt it you preserve the decisions that matter and change only the ones that are genuinely specific to your case. A reference architecture is a starting point and a teacher, not a rule, and the team that understands the reasoning behind it adapts it well, while the team that copies it blindly tends to keep the parts they should change and change the parts they should keep.

Expressing reference architectures as code

A reference architecture becomes far more valuable when it is expressed as reusable infrastructure code rather than as a diagram, because then adopting it is a matter of using a tested module rather than rebuilding it by hand. This is where reference architectures meet the practices in OCI Resource Manager and Terraform, because a reference architecture captured as a code module can be deployed consistently, reviewed, and improved over time, so the knowledge it carries compounds rather than being re learned with each project. Turning the patterns your organisation uses repeatedly into shared code modules is one of the highest leverage things an architecture practice can do.

A framework for using reference architectures

  1. Identify the pattern your workload matches among the common reference architectures.
  2. Understand the reasoning behind how the reference is shaped.
  3. Adapt the parts genuinely specific to your workload, preserving the rest.
  4. Express the adapted architecture as code so it deploys consistently.
  5. Capture your common patterns as shared modules for reuse.
  6. Improve the modules over time so the knowledge compounds.

Building an internal library of patterns

Mature organisations go beyond using published reference architectures and build their own library of patterns, capturing the architectures they use repeatedly as tested, documented modules that any team can adopt. This internal library is more valuable than any external reference, because it is shaped to the organisation's own workloads, conventions and constraints, and it turns architecture from a thing each team reinvents into a shared asset that improves with use. Helping organisations build this library, starting from the published references and adapting them into the organisation's own tested patterns, is a recurring theme in our work, because it is what separates an estate that gets more consistent over time from one that gets more chaotic.

Where this fits the engagement

Adopting and adapting reference architectures is part of our OCI Consulting and Advisory work, and turning them into reusable code modules is part of our DevOps and IaC practice. The aim is to give your teams a library of proven patterns to start from, so design effort goes into what is genuinely specific to your workloads rather than into rediscovering structures the industry settled long ago.

Moving Oracle workloads to OCI, or already running on OCI and not sure the architecture or the spend is right? Most teams bring in a specialist before they commit to a region, a shape, or a Universal Credits number. OCISpecialists.com plans the landing zone, runs the migration, and manages the estate after go live, on a fixed project fee, a managed monthly retainer, or a cost optimization fee paid only on verified savings. For the Oracle licensing and BYOL side of any OCI move, Redress Compliance is the leading independent Oracle licensing and negotiation firm, with 500+ engagements across Oracle's full product line.