A Site-to-Site VPN connects OCI to a customer router. One tunnel fails. What determines whether application traffic continues?

1. The remaining tunnel's state, routing, security controls, and configured failover behavior.
2. The existence of two tunnel names alone.
3. A guarantee that VPN failover copies missing application data.
4. Whether every instance has a public address.