Question

Your company has 40 spoke VNets that must all connect to a single hub VNet where a shared Azure Firewall resides. You need spokes to reach the hub, and you also need spokes to communicate directly with each other without routing through the hub. You want to manage this at scale as new spokes are onboarded automatically based on tags. Using Azure Virtual Network Manager, which connectivity configuration topology and option should you deploy?

Accepted Answer

A hub and spoke topology with the 'Spokes can communicate with each other (direct connectivity)' option enabled, applied to a dynamic network group

Answer

A mesh topology applied to a static network group containing only the spoke VNets

Answer

A hub and spoke topology without direct connectivity, relying on user-defined routes to force spoke-to-spoke traffic through the hub firewall

Answer

Individual manual VNet peerings from each spoke to the hub plus a full mesh of manual peerings between all 40 spokes