☁️

Azure VNet: Subnets, NSGs, Peering & ExpressRoute

Medium

Free preview · 2 of 5 steps

Azure VNet: isolated network with explicit connectivity

Azure Virtual Networks (VNets) are software-defined Layer 3 networks within Azure's infrastructure. VNets are isolated by default — no traffic flows between VNets, or between VNets and on-premises, without explicit configuration.

The hub-spoke model is the canonical enterprise design: a hub VNet containing shared services (firewall, VPN/ExpressRoute gateway, DNS), with spoke VNets peered to the hub for connectivity. Spoke-to-spoke traffic routes through the hub firewall for inspection.

Packets in motion — click to inspect:

1 / 2

Space to play/pause · ← → to step