If all your spokes need to be able to egress from that one site, why not change that site to be a Hub, advertising the particular destination IP address / IP route - with all the Spokes (also) having a tunnel to your new Hub - that way you avoid hairpinning traffic through an existing Hub? ... View more