Spoke to Spoke via 2 Azure Firewalls

Roberto YopRoberto Yop
1 min read

Azure HUB(spoke)<->HUB(spoke)

The Original (manual) setup: Connecting two HUB(spoke)<->HUB((spoke) on two different subscriptions with 2 Azure firewalls on each side:

Each Subscription belonged to its own AzureAD (Entra) and it worked as shown in the image below:

I wrote the Terraform code to perform the deployment and it does work (for the most part), https://github.com/soyroberto/terrahubspoke

except I had to do the peering manually as the service principal althought having permissions didn't perform the action in Terraform.

Documentation is not exactly long or detailed about it and almost everybody ran over the same issue. To be tested further in the future (TF Vnet peering). Move the networking code to the 'i' directory

References:

0
Subscribe to my newsletter

Read articles from Roberto Yop directly inside your inbox. Subscribe to the newsletter, and don't miss out.

Written by

Roberto Yop
Roberto Yop

I'm technology-geek person, in love with almost all things tech from my daily job in the Cloud to my Master's in Cybersecurity and the journey all along.