Azure Hub and Spoke Network Architecture

This project implements a modular Azure Hub and Spoke network architecture using Pulumi and Python, following the Azure Well-Architected Framework principles.

Project Structure

.
├── modules/
│   ├── network/             # Virtual Network and subnet management
│   └── network_security/    # Network Security Group management
├── __main__.py             # Main infrastructure entry point
└── requirements.txt        # Python dependencies

Modules

Network Module

• Manages Virtual Networks and Subnets
• Provides VNet peering functionality
• Supports custom subnet configurations

Network Security Module

• Manages Network Security Groups (NSGs)
• Configurable security rules
• Reusable across different environments

Setup

1. Create a Python virtual environment:

python -m venv venv
source venv/bin/activate  # On Windows use: .\venv\Scripts\activate

2. Install dependencies:

pip install -r requirements.txt

3. Configure your Azure credentials:

az login

4. Create a new stack:

pulumi stack init dev

5. Configure the stack:

pulumi config set location eastus

6. Deploy:

pulumi up

Module Configuration Examples

Creating a Virtual Network

network = VirtualNetwork('hub', {
    'name': 'hub',
    'location': 'eastus',
    'environment': 'dev',
    'resource_group_name': resource_group.name,
    'address_space': ['10.0.0.0/16'],
    'subnets': [
        {
            'name': 'subnet1',
            'address_prefix': '10.0.1.0/24'
        }
    ]
})

Creating a Network Security Group

nsg = NetworkSecurityGroup('example', {
    'name': 'example',
    'location': 'eastus',
    'environment': 'dev',
    'resource_group_name': resource_group.name,
    'rules': [{
        'name': 'allow-internal',
        'priority': 100,
        'direction': 'Inbound',
        'access': 'Allow',
        'protocol': '*',
        'source_port_range': '*',
        'destination_port_range': '*',
        'source_address_prefix': 'VirtualNetwork',
        'destination_address_prefix': 'VirtualNetwork'
    }]
})