The role of the Hub
Hosts on-premises connectivity, internet egress, Firewall, DNS Forwarder, shared services, and more. Consolidates functions commonly used by multiple Spokes.
Landing Zone Network Guide
4 Hub-Spoke Network
The Hub holds shared functions and entry points; Spokes are where business systems reside. Design Gateway Transit, UDR, and Firewall routing control as a set.
Key points of this chapter
- Consolidate Gateway / Firewall / DNS in the Hub
- Separate Spokes by workload or environment
- Watch for address overlap and asymmetric routing
Explanation note
First explain the flow with a diagram, then supplement only the key points in text. For those unfamiliar with networking, showing where traffic flows before terminology is effective.
The role of the Spoke
Separated by workload such as apps, DBs, batch, testing, and DR. Routes from Spoke to Hub are controlled with UDR.