Hub & Spoke topology in Azure

 

What is HUB & SPOKE Model?

The hub is a virtual network in Azure that acts as a central point of connectivity to your on-premises network. The spokes are virtual networks that peer with the hub, and can be used to isolate workloads. Traffic flows between the on-premises datacenter and the hub through an ExpressRoute or VPN gateway connection.

Hub is a central point of connectivity to your OP network and the spoke are the Vnet that peers with the hub. Bcoz of the centralization it will save the cost and the work load can be managed via the Vnets.

Benefits:

1. COST SAVING - You can save cost by deploying resources such as Network virtual appliance and DNS at Central location.
2. OVERCOME Subscription Limits - You can overcome subscription limits by peering virtual networks from different subscriptions to central hub.
3. Can separate workloads for SecOps (The HUB) and DevOps (Spokes)
4. ISOLATION You can Deploy the workloads that do not require connectivity to each other like Prod, Testing env but need connectivity to shared resources DNS, ADDS
5.  Organizations that need centralized control over security aspects such as DMZ, Firewall.