Hub and Spoke Reference Architecture on Azure

Complete Tutorial available on Azure Docs

VM IPs

IP
10.0.0.68	Hub Jumpbox
10.0.0.36	Hub NVA
10.1.0.68	Spoke 1 VM
10.2.0.68	Spoke 2 VM

Network Diagram

Please note the NVA for Spoke transient routing is missing in the HUB VNet diagram. This script deploys an OPNsense NVA. You can log into the On-Prem VM (terraform output) and you should be able to ping all the VMs

Credits

OPNsense NVA is based on the work of https://github.com/dmauser/opnazure