Dynamic Routing Gateway

Oracle Cloud Infrastructure (OCI) Dynamic Routing Gateway (DRG) is a virtual networking router in OCI that connects virtual cloud networks (VCNs), OCI FastConnect dedicated lines, OCI Site-to-Site VPNs, and SD-WAN devices. OCI DRG provides static and dynamic routing capabilities, including BGP support.

Use cases for OCI Dynamic Routing Gateway

OCI Dynamic Routing Gateway use case diagram, description below

This image shows four common use cases for OCI Dynamic Routing Gateway:

  • Attaching FastConnect
  • Attaching site-to-site virtual private networks
  • Creating a transit hub
  • Attaching software-defined wide area network devices

Attaching FastConnect
In the first use case, an OCI region is shown. It contains a virtual cloud network that has a dynamic routing gateway attached. The dynamic routing gateway is bidirectionally connected to a FastConnect connection.

The FastConnect connection is bidirectionally connected to an on-premises location.

In this scenario, the dynamic routing gateway is the connecting point between a FastConnect connection and a virtual cloud network.

Attaching site-to-site virtual private networks
In the second use case, an OCI region is shown. It contains a virtual cloud network that has a dynamic routing gateway attached. The dynamic routing gateway is bidirectionally connected to a site-to-site virtual private network.

The site-to-site virtual private network is bidirectionally connected to an on-premises location.

Here, a dynamic routing gateway is the connecting point between a site-to-site virtual private network and a virtual cloud network. A site-to-site virtual private network could also run over a FastConnect connection, which would provide additional encryption over an already private connection.

Creating a transit hub
In the third use case, two OCI regions are shown. Each region has a virtual cloud network with an attached dynamic routing gateway. The dynamic routing gateways are bidirectionally connected to each other.

Network traffic can flow from the virtual cloud network in one region to the virtual cloud network in another region. This enables customers to use dynamic routing gateways in a manner similar to a traditional router. Traffic can be forwarded from one region to another.

Attaching software-defined wide area network devices
In the fourth use case, an OCI region is shown. It contains a virtual cloud network that has a dynamic routing gateway attached. A virtual machine acting as a software-defined wide area network appliance within the virtual cloud network is attached to the dynamic routing gateway.

The dynamic routing gateway is attached to both a site-to-site virtual private network and a FastConnect connection. Both the site-to-site virtual private network and FastConnect are connected to customer premises equipment, which is in an on-premises location.

A software-defined wide area network controller is in the on-premises location.

The appliance in the virtual cloud network and the controller in the on-premises location communicate with each other. The controller can issue commands to the appliance. These commands will be passed on to the dynamic routing gateway. The commands can configure the connections between OCI and the on-premises location.

This allows OCI to participate in a customer’s software-defined wide area network.

Benefits of OCI Dynamic Routing Gateway


1. Creating the network you need

Define a custom network topology that meets your needs, including connections to multiple VCNs, on-premises locations, and third-party networks.

2. Traffic routing on your network, even transitively

Create routes on your OCI network that route traffic between multiple attachments, including DRGs connected to other DRGs. This allows you to route traffic transitively, which is a feature that other cloud providers typically charge for.

3. No additional fee for DRG service

OCI Dynamic Routing Gateway is available for no additional charge. There is no per-hour connection fee or per-byte data processing fee, which other cloud providers typically charge for similar services.

Reference architectures and solution playbooks

See all reference architectures

Set up a hub-and-spoke network topology using a dynamic routing gateway

Use the hub-and-spoke architecture to build creative and powerful networking solutions in the cloud with a dynamic routing gateway.

Deploy multicloud inbound and outbound private network connectivity

This architecture provides the necessary connectivity between multicloud private networks and Oracle's cloud services and applications without directing traffic through the public internet.

Configure cross-region private connectivity between tenancies

This architecture provides private network connectivity between two tenancies and across two regions.

Get started with Dynamic Routing Gateway


Oracle Cloud Free Tier

Build, test, and deploy applications on Oracle Cloud—for free. Sign up once, get access to two free offers.


Contact sales

Interested in learning more about Oracle Cloud Infrastructure? Let one of our experts help.