01
Inventory applications, sites, users and external dependencies
Apply this point to a real Kubernetes & AKS Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
Kubernetes & AKS Academy · Architecture Explorer
Hub-and-Spoke Networking Architecture
Build a segmented enterprise network using central connectivity, shared services and controlled spoke communication.
Objective: Produce predictable traffic flows with strong isolation, inspection, DNS and operational ownership.
Practical guidance
Business context and requirements
02
Document east-west, north-south and hybrid traffic flows
Apply this point to a real Kubernetes & AKS Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
03
Define latency, bandwidth, DNS and segmentation requirements
Apply this point to a real Kubernetes & AKS Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
Practical guidance
Architecture and design decisions
01
Select hub services, peering, routing and firewall placement
Apply this point to a real Kubernetes & AKS Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
02
Design shared DNS, private endpoints and ingress or egress patterns
Apply this point to a real Kubernetes & AKS Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
03
Define route propagation and spoke-to-spoke communication rules
Apply this point to a real Kubernetes & AKS Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
Practical guidance
Security, cost and operating model
01
Centralise inspection, logging and rule ownership
Apply this point to a real Kubernetes & AKS Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
02
Estimate firewall, gateway, traffic and private-link costs
Apply this point to a real Kubernetes & AKS Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
03
Create operational runbooks for routing and connectivity changes
Apply this point to a real Kubernetes & AKS Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
Practical guidance
Validation, resilience and evolution
01
Test allowed and denied traffic paths
Apply this point to a real Kubernetes & AKS Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
02
Validate effective routes, DNS resolution and failover behaviour
Apply this point to a real Kubernetes & AKS Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
03
Review IP capacity, regional expansion and migration constraints
Apply this point to a real Kubernetes & AKS Academy design, delivery or operational scenario and record the evidence used to validate the outcome.