Azure hub-spoke network topology connecting on-premises corporate networks to Azure via VPN Gateway, with centralized shared services and firewall in the hub VNet. Traffic flows from the Corporate Network through the VPN Gateway into VNet-Hub (10.0.0.0/16), which peers with VNet-Spoke (10.1.0.0/16) containing application and data subnets. This architecture enforces centralized security policies, reduces redundancy, and simplifies management of hybrid connectivity across multiple spoke VNets. Fork this diagram on Diagrams.so to customize subnets, add additional spokes, or integrate Azure Firewall rules for your organization. The hub-spoke pattern is ideal for enterprises requiring scalable, secure multi-workload deployments with on-premises integration.