This image shows an Oracle Cloud Infrastructure region containing a hub virtual cloud network (VCN) connected to two spoke VCNs through a pair of local peering gateways (LPGs).

The hub VCN has two subnets: a management subnet to which includes Oracle Cloud Infrastructure Bastion, and a services subnet with a service virtual machine (VM). Each spoke VCN has a workloads subnet containing a sample workload VM.

Each subnet has a security list and a route table. The hub VCN has two gateways: an internet gateway to connect to the public internet, and a dynamic routing gateway (DRG) to connect privately with the on-premises network using Oracle Cloud Infrastructure FastConnect or OCI Site-to-Site VPN.