Networking

Hub-and-Spoke vs Full Mesh VPN

Network Design diagram · made in Skemio

Network diagram contrasting a central hub router with spoke branch sites, showing hub-and-spoke vs direct spoke-to-spoke peering.
Network diagram contrasting a central hub router with spoke branch sites, showing hub-and-spoke vs direct spoke-to-spoke peering.
Open it in SkemioMake your own

What it shows

  • Mesh tunnels grow exponentially: N*(N-1)/2 connections become unmanageable.
  • Hub-and-Spoke simplifies routing but adds latency and chokes hub uplinks.
  • Dynamic multipoint (DMVPN) offers on-demand spoke-to-spoke without static meshes.

The takeaway

Balance operational complexity against latency: Hub-and-Spoke simplifies, Mesh eliminates hairpinning.

More network design diagrams