The request
“Create an Azure hub-spoke network with an on-premises router through an ExpressRoute gateway and Azure Firewall to two spoke virtual networks, containing web, application and database servers, plus Internet connected to the firewall.”
Then tryAdd a third spoke virtual network with a server.Add a VPN gateway connected to the on-premises router.
What is in this drawing
Read the decisions behind it.
01
Centralized egress via Azure Firewall in hub to inspect all traffic.
02
ExpressRoute for private, high-bandwidth hybrid connectivity.
03
Separate spokes for web/app and database tiers to enforce segmentation.
This pattern suits multi-tier applications requiring hybrid connectivity, network segmentation, and centralized firewall management. Adaptable to multiple environments by adding more spokes.
More like this