flowchart TB
inet(["Internet"])
dc["Corporate Data Centre<br/><i>10.0.0.0/8</i>"]
subgraph hub["Hub — 10.100.0.0/16"]
direction TB
fw["Egress Firewall<br/><i>FQDN allow-list</i>"]
vpn["VPN / Direct Link<br/><i>BGP</i>"]
dns["Private DNS Resolver"]
end
subgraph spokeA["Spoke: Prod — 10.101.0.0/16"]
direction TB
pub["Public Subnet<br/><i>10.101.0.0/24 — ingress LB only</i>"]
app["App Subnet<br/><i>10.101.10.0/23 — no public IPs</i>"]
data["Data Subnet<br/><i>10.101.20.0/24 — private endpoints</i>"]
pub --> app --> data
end
subgraph spokeB["Spoke: Non-Prod — 10.102.0.0/16"]
appn["App Subnet<br/><i>10.102.10.0/23</i>"]
end
inet -->|"443 only"| pub
app -->|"all egress"| fw --> inet
appn --> fw
dc <-->|"BGP"| vpn
vpn --- spokeA
vpn --- spokeB
spokeA x--x spokeB
Deployment & Infrastructure View
Network Topology Diagram
Segments, address ranges, routes and the control points between them — the view that says what can reach what at layer three.
Networking
Design