thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Cloud Computing · Intermediate

Hub-and-Spoke Network Topology

Network design where a central hub network hosts shared services and connectivity, and spoke networks connect only to the hub.

Definition

In cloud environments the hub typically contains firewalls, gateways to on-premises networks, DNS and other shared services, while workload spokes peer with or attach to the hub. It centralizes inspection and reduces connections compared with a full mesh. Implementations include AWS Transit Gateway, Azure hub VNets or Virtual WAN, and Google Cloud Network Connectivity Center.

Example

Spoke VNets for each application peer with a hub VNet containing Azure Firewall and an ExpressRoute gateway.

Exam tip

Spoke-to-spoke traffic needs routing through a hub firewall or transit service, because peering itself is non-transitive.

Related terms