Looking for a solution for: Azure network hub with connected vNets(other Azure subscribtions) with overlapping subnets

ScreptorIT 20 Reputation points
2024-06-12T08:41:33.9966667+00:00

We have set up a functional design where our customer wants to connect several of their customers with an Azure subscription to the Azure Network Hub. The Azure Network Hub is connected to the customer's on-premises data center via an ExpressRoute connection.

The customers connect their vNets (Spokes) to the Azure Network Hub. We need to be able to route traffic from the customer vNets to the on-premises corporate network.

There is a possibility of an overlapping subnet between the customer vnets. vNet peering is therefore not an option.

I would like to know what solutions are available to achieve this. See attached diagram for routing details with overlapping customer subnets.

Azure_Network_Hub-Routing_only-2024-6

Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
1,441 questions
Azure Virtual Network
Azure Virtual Network
An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.
2,278 questions
0 comments No comments
{count} votes

Accepted answer
  1. KapilAnanth-MSFT 40,256 Reputation points Microsoft Employee
    2024-06-12T10:09:44.8966667+00:00

    @ScreptorIT ,

    Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

    I understand that you have a Hub Virtual Network connected to OnPrem via ExpressRoute and multiple Spoke VNETs with overlapping address ranges that need to connect to OnPREM via the Hub.

    With your current set up,

    NOTE:

    • This means, you have to deploy VPN Gateways in all the Spoke VNETs
    • And also, you must consider the maximum number of connections the Hub Gateway SKU can support
    • My suggestion would be to use VNET Peering whenever possible and only create S2S/VNET-to-VNET when there is an existing VNET Peering with overlapping address range so that you don't hit the maximum connection limits.

    Additionally, you can use vWAN in scenarios where you need more than 100 S2S VPN tunnels

    Cheers,

    Kapil


    Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.


0 additional answers

Sort by: Most helpful