The image shows an On-Premises or Third Party Cloud, Internet, and an OCI Region.

On-Premises or Third Party Cloud contains:

Management Agent connected to a Management Gateway via https and Application Servers.
Management Agent connected to a Management Gateway via https and Database Servers.
Management Gateway connected to Customer Premises Equipment.

Internet contains Site-to-Site VPN with IP Sec Tunnel 1 and IP Sec Tunnel 2 connecting OCI Region with On-Premises on Third-Party Cloud.

OCI Region contains:

Customer VCN with Subnet having a Management Gateway and Route Table, DRG Attachment, Service Gateway.
Oracle Services Network: Database Management, Operations Insights, SPLAT/Load Balancer, Logging Analytics, Application Performance Monitoring.

You can set up your on-premises network with private access to Oracle services through Management Gateway Peering over a secure tunnel. The on-premises Management Gateway is configured to redirect traffic to the Management Gateway within the cloud VCN. Using the service gateway, this traffic can be forwarded to Oracle Cloud Observability and Management Platform Services.