About This Architecture
Hub-and-spoke network topology with a central hub VNet containing shared services (Azure Firewall, VPN Gateway, Bastion) peered to multiple spoke VNets for workload isolation. Includes User Defined Routes for traffic inspection.