Share via

Internet access options in the Azure Virtual WAN hub

Yuanhui Zhang 20 Reputation points
2025-09-23T18:28:01.74+00:00

Since the Vritual WAN hubs are Microsoft-managed instances, and users cannot add load balancer into the hubs. What are the available options to provide the Internet access for the Virtual WAN hubs and it's peered Virtual networks?

Azure Virtual WAN
Azure Virtual WAN
An Azure virtual networking service that provides optimized and automated branch-to-branch connectivity.
0 comments
Answer accepted by question author
  1. Ganesh Patapati 10,385 Reputation points Microsoft External Staff Moderator
    2025-09-23T19:42:55.8566667+00:00

    Hello Yuanhui Zhang

    Use Azure Firewall in the vWAN Hub

    Azure Firewall Manager allows you to deploy Azure Firewall inside the Virtual WAN hub.

    • Azure Firewall in vWAN hub can provide outbound Internet access for workloads in spoke VNets connected to the vWAN hub.
    • You can enable Internet traffic routing by configuring:
      • Default route (0.0.0.0/0) in route tables.
      • Associating spoke VNets and enabling traffic inspection through the firewall.

    This service can handle outbound internet traffic for your virtual networks.

    Refer: how to configure Azure Firewall in a Virtual WAN hub

    Refer: https://techcommunity.microsoft.com/blog/azurenetworkingblog/understanding-the-core-concept-and-routing-of-vwan-with-example-/4081473

    I hope this was helpful!

    If the above is unclear or you are unsure about something, please add a comment below.

    Please click Accept Answer and upvote if the above was helpful.Accepted answer

    Thanks.

    0 comments

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.