Network Considerations Lacking

[liamfoneill]

There are lots of gaps in this landing zone accelerator particularly around Network Design. There is no mention of Azure Firewall or VWAN hubs which are the most common seen in Enterprise Scale Network topologies.

[jagslab]

I too have fallen into this gap.
I was trying to figure out how to design APIM in a hub (vWAN hub) and spoke network, protected by Azure Firewall. I cannot find any documentation on the best way to do this.

[perrylambr]

Same here. We wanted to create an Azure Landing Zone based on the Hub/Spoke model of the Cloud Adoption Framework using an Application Gateway, Azure Firewall and API Management with forced tunneling. In the end we build our own solution based on the following articles. Maybe it can help you as well.

• https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ready/landing-zone/
• https://learn.microsoft.com/en-us/azure/architecture/example-scenario/gateway/firewall-application-gateway#application-gateway-before-firewall
• https://learn.microsoft.com/en-gb/azure/api-management/api-management-howto-integrate-internal-vnet-appgateway

[anwarnk]

@liamfoneill did you find a working solution for APIM in a vWAN hub?