You file a ticket with My Oracle Support and Oracle provisions a connection between the IP network's private gateway and the VCN's attached dynamic routing gateway (DRG). The connection runs over Oracle's network and not the internet.
The two environments must be in the same geographical area, and the connection is available only between the specific regions listed in Overview.
The two environments must belong to the same company. Oracle validates this when setting up the connection.