Designing a scalable network topology in Azure
If a company wants to grow in its use of Azure, it needs to make it easier for VNet resources to communicate with other VNets, on-premises networks (networks not in the cloud), and the internet. The recommended approach is to use a hub-and-spoke topology. In this design, we have a hub virtual network acting as a central point for connecting spoke networks, on-premises networks, and the internet (Figure 7.1).
The spoke virtual networks connect to the hub to access the internet and other networks. This design is helpful because it centralizes connectivity and security rules, rather than having each spoke VNet handle these things separately. Imagine having to maintain routing and security rules for 100 VNets separately! It also allows for the isolation of network communication if needed, such as creating separate VNets for production and development for traffic isolation at the network level.
Figure 7.1 –...