Global Vnet Peering (None Paired Region)

Shola Lawani 526 Reputation points Microsoft Employee

Hello Experts,

If I have a hub & spoke set up in an azure region, is it optimal to set up global vnet to connect it with another Non paired secondary so that the non paired secondary region can make use of the shared services in the hub (such as the NVA) for traffic inspection and routing.

Azure Virtual Network
Azure Virtual Network
An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.
1,408 questions
0 comments No comments
{count} votes

Accepted answer
  1. Stephane Budo 426 Reputation points


    Unfortunately, the answer is "it depends" (sorry, I don't like when people answer this).

    It really depends on your requirements and preferences.
    My recommendation would be to have a central hub and indeed have all the spoke connecting to it. That being said, while this is the ideal architecture from a security point of view (central point of management), it might not be the ideal architecture from a networking perspective.
    Depending on your requirements, you might find that it is better to have multiple hub and spokes networks, all with their own NVA, connected together through each Hub. This of course increases the cost (appliances, maintenance, etc.), and the security exposure, but it's a much better design from a networking perspective.

    I would also recommend to look at Azure Virtual WAN:

    Hope this helps,


    (Please don't forget to accept helpful replies as answer)

    0 comments No comments

0 additional answers

Sort by: Most helpful