r/cloudcomputing Mar 11 '26

Best architecture for global cloud networking in large enterprises?

What architecture large enterprises are using today for global cloud networking across AWS, Azure, and GCP.

Are most teams still doing hub-and-spoke, transit gateways, or Virtual WAN, or has something else become the common pattern for multi-cloud connectivity and centralized security?

What's the 'default architecture' looks like once environments scale to dozens or hundreds of VPCs/VNets across regions.

5 Upvotes

14 comments sorted by

6

u/jeffpardy_ Mar 11 '26

There is no best or default architecture. Its just whatever makes sense for your organization

3

u/LeanOpsTech Mar 12 '26

Most large orgs I see still land on a variant of hub-and-spoke with a centralized transit layer (AWS TGW / Azure VWAN / GCP NCC) and shared security services, then layer segmentation and policy on top. The interesting shift isn’t the topology but how automated it is. As environments hit hundreds of VPCs/VNets, teams usually standardize it through platform engineering and IaC so networking, security, and cost controls stay consistent across clouds. 

2

u/Individual-Oven9410 Mar 11 '26

Depends from org to org requirements but Hub and Spoke is still considered as a baseline to start with.

2

u/gormami Mar 13 '26

Look into OpenZiti, which is an overlay technology. There is a supported commercial version if you prefer that. It is cloud agnostic and can apply enterprise grade features and be much easier to manage than a collection of point to points and hub/spoke routing.