Rectangle 11806-min
Microsoft Cloud Hack

Azure Networking with Hub and Spoke

Students in a classroom-min

Course Description

In this hack students will engage into an increasingly complex Azure Virtual Network setup, finding many of the challenges that often appear in production environments. The Hack starts with a deep dive in hub and spoke networking and user-defined routes during the first day and goes on by adding components such as the Azure Application Gateway or PaaS networking in the second day. 

Learning Objectives

After completing this hack, participants will be familiar with these concepts, amongst others: 

  • VNet peering 
  • User Defined Routes and hybrid connectivity 
  • Scenarios with potential asymmetric routing 
  • Azure Firewall DNAT (Destination Network Address Translation) rules 
  • Azure Firewall network and application rules 
  • Designs combining the Azure Firewall and the Application Gateway 
  • PaaS Networking options such as Vnet service endpoints and Private Link

About this course


2 Days


  • Challenge 0: Pre-requisites
    • Prepare your workstation to work with Azure
  • Challenge 1: Hub and spoke
    • Configure a basic hub and spoke design with hybrid connectivity
  • Challenge 2: Azure Firewall
    • Fine tune your routing to send additional traffic flows through the firewall
  • Challenge 3: Routing Troubleshooting
    • Troubleshoot a routing problem introduced by a different admin
  • Challenge 4: Application Gateway
    • Add an Application Gateway to the mix
  • Challenge 5: PaaS Networking
    • Integrate Azure Web Apps and Azure SQL Databases with your hub and spoke design 


  • No specific prerequisites are needed, but familiarity with Azure Networking is a plus. 

Ready to get started?