הבקשה
“Create an Azure hub-spoke network with an on-premises router through an ExpressRoute gateway and Azure Firewall to two spoke virtual networks, containing web, application and database servers, plus Internet connected to the firewall.”
ואז נסוAdd a third spoke virtual network with a server.Add a VPN gateway connected to the on-premises router.
מה מופיע בתרשים הזה
פענחו את ההחלטות שמאחוריו.
01
Centralized egress via Azure Firewall in hub to inspect all traffic.
02
ExpressRoute for private, high-bandwidth hybrid connectivity.
03
Separate spokes for web/app and database tiers to enforce segmentation.
This pattern suits multi-tier applications requiring hybrid connectivity, network segmentation, and centralized firewall management. Adaptable to multiple environments by adding more spokes.