What Is A Characteristic Of A Wan Hub-And-Spoke Topology?

What is a characteristic of a wan hub-and-spoke topology?
Before we discuss the characteristics of the wan hub and spoke topology, let us know the basic information about the wan hub and spoke topology and let us know why we need to know about the Hub-spoke topology.

The below figure shows the architecture of the wan hub-spoke topology. Here we have a VPN device that is connected to a virtual network. The hub-spoke topology is always been a hub virtual network. And we have a spoken virtual network that is connected to the hub. It is not a mandatory thing that we should always present an on-prem network, then it becomes a hub and spoke topology.

If the VPN is not present, we call the below figure the hub-spoke topology. Hence we have known how the hub-spoke architecture look likes. simply, a hub is a virtual network that acts as a central point of connectivity to the on-premises network or to some other virtual networks that are created for Isolation. And SPOKE is a virtual network that inspects with the hub. It is used for the isolated workloads.
The traffic flows between the on-premises data center and the help through either a VPN site to site or by the express route.
If we do not have the on-premises we don’t need the gateway because the peering doesn’t require any gateway.

Now let us understand how this architecture is getting used. The workloads can be deployed in the different types of the environment such as the developmental testing and protection that required shared services such as DNS, NTP, etc.

All the shared services are placed in the hub virtual network while each of the environments is deployed into a spoke in order to maintain the isolation. Here we are segregating all the environments with the virtual networks or with all the virtual networks by using some of the shared services from the hub virtual networks.
The hub virtual network consists of a firewall, DNS, DBMS, and all the shared or managed services that are in the hub. All these give isolation between the environment for the security and the management purpose.

Now let us know some of the characteristics of the hub-spoke topology. By centralizing the services that can be shared by the multiple resources or by the multiple environments uses the same shared services. These are very cost-effective. We can have these spokes in the same subscription or can we have them in a different subscription. The isolation can help in the security check.

The hub VNET is the central point of the connectivity to the on-premises network and hosts the services that can be consumed by the different workloads hosted by the spoke virtual network. We also need the gateway subnet for the VPN gateway spoke virtual network and peers. The spokes are mainly used to isolate their own virtual networks that are managed separately from their spokes. Each workload can have multiple tiers with multiple subnets through the load balancers.