One Armed/HUB/Passthrough only direct tunnels for EBGP advertisements?

[Ronny63]

We use an SD-WAN that includes both HUB, Spokes and a couple of Onearmed/HUB/Passthrough with EBGP to reach externally.
All Spokes can communicate with anything within the SD-WAN even though it only has dynamic tunnels to a few HUBS.

But it doesn't work if the same spoke tries to communicate beyond its SD-WAN thru Onearmed/EBGP without also adding the One Armed as a HUB under site-to-site.

Without direct tunnel Onearmed shows route/prefix to the Spoke but it´s prefix is not propagated  to its EBGP neighbor

Is it a requirement that Onearmed/HUB/Passthrough require that direct tunnels exist for everything that shall be included in EBGP?.

[ww · Accepted solution]

I think whats happening  is your spoke without direct connection to the bgp hub does not learn bgp subnets

This happens because ibgp split horizon

[PhilipDAth]

Building on @ww's answer, what does the route table show on the problem spoke?