A startup wants to quickly deploy a simple web application in OCI. They need an isolated network where they can place public web servers and private backend services. Which OCI service provides this foundational network isolation?