The image shows an architecture diagram of the process to migrate a database from on-premises to the cloud using unplug and plug, as described in the surrounding text.

The Oracle Cloud Region has one availability domain with a public subnet that contains a bastion host and a private subnet that contains the DB System instance and the CDB (Container Database). The region has a VCN, Dynamic Routing Gateway, and a route table and a security list for each subnet.

The on-premises data center has a CPE (customer premise equipment), a bastion host, an Oracle DB Enterprise Edition, a CDB, and storage. An IPSEC VPN FastConnect links the CPE to the Dynamic Routing Gateway. SQL*Net verification is performed between the on-premises database and the DB System in the cloud. An scp connection flows from the on-premises CDB to the CDB in the private subnet that contains the DB System.