Skip to content

DeploymentFlowVWAN

github-actions edited this page Feb 9, 2023 · 5 revisions

Azure Landing Zones Bicep - Deployment Flow - Virtual WAN

Intro

This deploys a hub and spoke network topology with Azure Virtual WAN to the Azure Landing Zone foundation. This connectivity approach uses Virtual WAN (VWAN) to replace hubs as a managed service. Spoke virtual networks peer with the VWAN virtual hub.

Please review and run the Deployment Flow before running these modules.

Module Deployment Sequence

There are 2 options available to deploy the Hub & Spoke networking topology. One that uses an orchestration module for the spoke networking and one that does not.

We recommend using option 1 were possible as the orchestration module has some added benefits, like subscription placement, as well as the spoke networking.

Option 1 - Using Orchestration Module

This option does utilize an orchestration module (a module that wrap/call other modules).

Deployment Order Module Description Prerequisites Module Documentation
1 Virtual WAN Connectivity Deploys the Virtual WAN network topology and its components according to the Azure Landing Zone conceptual architecture. Management Groups, Subscription for vWAN connectivity. infra-as-code/bicep/modules/vwanConnectivity
2 Hub Peered Spoke Networking Creates Spoke networking infrastructure for workloads with Virtual Network Peering (optional) to support Hub & Spoke network topology or Virtual Hub Connection (optional). Also can optionally place Subscription in specified Management Group, create VNet Peering in both directions, create UDR and configure a next hop IP for the default route (0.0.0.0/0) Review docs of module for more information. Management Groups, Hub Networking & Subscription for spoke networking infra-as-code/bicep/orchestration/hubPeeredSpoke

Option 2 - No Orchestration Module

This option doesn't utilize any orchestration modules (modules that wrap/call other modules).

Order Module Description Prerequisites Module Documentation
1 Virtual WAN Connectivity Deploys the Virtual WAN network topology and its components according to the Azure Landing Zone conceptual architecture. Management Groups, Subscription for vWAN connectivity. infra-as-code/bicep/modules/vwanConnectivity
2 Spoke Network Creates Spoke networking infrastructure for workloads to support VWAN topology. Spoke subscriptions are used for deploying construction sets and workloads. Management Groups, Hub Networking & Subscription for spoke networking infra-as-code/bicep/modules/spokeNetworking
2 VNet Connection (Peering) with VWAN Connect a spoke virtual network to a Virtual WAN virtual hub. Management Groups, Subscription for spoke VNet, vwanConnectivity Module, spokeNetworking module infra-as-code/bicep/modules/vnetPeeringVwan