vMX-M deployment in Azure hube or spoke

[Tarmahmood1]

Hi, I want to deploy vMX-M in azure. What is the best practice to deploy either in Hub or spoke. It is to be noted we have Azure Firewall and all traffic passes through it inbound and outbound.

LAN-----> MX-75 --> xVM --> Azure hub(Azure firewall, VPNGW, mgmt vm) <---vnet peered---> spoke1(production)

                                                                                                                                                       spoke2(test)

                                                                                                                                                       spoke3(development)

I am planning to deploy in spoke1 in existing vnet with separate subnet. or i can deploy in Hub as well?

[PhilipDAth · Accepted solution]

If all (or most) other MXs in your org need to talk to things in Azure then make it a hub.

When you install it, make sure to set the zone to "none".