The image shows an On-Premises region and an OCI Region connected using either FastConnect or Site-to-Site VPN.
The On-Premises region includes CPE or Customer premises Equipment.
The OCI Region includes four VCNs with three availability domains (AD 1, AD 2, AD3) intersecting all four VCNs. Each VCN uses a services gateway (SG). The OCI region hosts policies, IAM, Audit, Logging, and Object Storage.