Design hub-and-spoke network topologies that connect multiple cloud providers consistently.
Information & Communications Technology
Multi-Cloud Network Connectivity and Transit Gateway Design
Teaches hub-and-spoke topology, transit gateway routing and private connectivity design so multi-cloud networks stay resilient and cost-efficient.
🗓️Duration5 training days
📚Content4 modules · 8 sessions
🎓On completionAccredited attendance certificate
About the programme
Course Overview
Enterprises running workloads across two or three cloud providers rarely plan the network connecting them until latency, cost or security incidents force the issue. This course teaches multi-cloud network connectivity design centred on transit gateway architecture: hub-and-spoke topologies, route table segmentation and redundant interconnects that behave predictably as the estate grows. Participants learn to plan IP address management across providers, provision dedicated interconnect circuits and BGP peering, and configure transit gateway route tables that keep production, non-production and shared services traffic properly isolated. Practical exercises include designing a hub-and-spoke topology for a three-cloud estate, configuring route propagation and summarisation, and troubleshooting a simulated cross-cloud connectivity failure. Participants leave with reusable topology diagrams, a routing design document template and a monitoring approach for tracking cross-cloud latency, cost and reliability over time.
Expected Learning Outcomes
Plan IP address management that avoids overlapping address ranges across clouds and accounts.
Configure transit gateway route tables that segment production, non-production and shared traffic.
Build redundant interconnect and peering paths that survive a single connectivity failure.
Route cross-cloud traffic through centralised inspection points to enforce segmentation policy.
Configure private endpoint connectivity to managed services without public internet exposure.
Monitor cross-cloud network performance and identify avoidable data transfer costs.
Who Should Attend
Network engineers designing connectivity across two or more public cloud providers.
Cloud architects responsible for landing zone network design and transit strategy.
Infrastructure teams migrating from single-cloud to multi-cloud network topologies.
Security engineers defining segmentation and inspection policy for cloud network traffic.
Network operations staff troubleshooting cross-cloud latency and connectivity incidents.
Telecom and connectivity managers negotiating interconnect and bandwidth contracts.
Course Modules
Select any module to see its sessions and points.
01Multi-Cloud Network Architecture Foundations
2 sessions · 8 points
Session 1Designing Hub-and-Spoke Topologies Across Providers
- Compare hub-and-spoke against full-mesh peering for estates spanning multiple cloud providers.
- Design shared services networks hosting common DNS, time synchronisation and egress inspection.
- Plan IP address management up front to avoid overlapping ranges across accounts and clouds.
- Select a cloud-native transit hub architecture matched to each connection's traffic pattern.
Session 2Establishing Cross-Cloud Private Connectivity
- Provision dedicated interconnect circuits for predictable latency instead of routing over the public internet.
- Configure BGP peering and route filters between on-premises networks and cloud transit hubs.
- Design redundant connections across physically diverse paths to avoid a single point of failure.
- Evaluate software-defined wide area network overlays for sites without dedicated interconnect access.
02Transit Gateway and Routing Design
2 sessions · 8 points
Session 1Route Table Segmentation and Propagation
- Build segmented transit gateway route tables separating production, non-production and shared traffic.
- Control route propagation to prevent unintended transitive routing between spoke networks.
- Apply route summarisation to keep routing tables manageable as the network estate grows.
- Document routing intent so future changes can be audited against the original design.
Session 2High Availability and Failover Design
- Design multi-attachment transit gateway configurations spread across availability zones.
- Test failover behaviour when a primary interconnect or peering path becomes unavailable.
- Apply equal-cost multi-path routing where supported to balance cross-cloud traffic load.
- Plan maintenance windows that avoid creating single points of failure during provider updates.
03Security and Segmentation Across Clouds
2 sessions · 8 points
Session 1Centralised Egress and Traffic Inspection
- Route inter-spoke and internet-bound traffic through a centralised inspection network.
- Deploy firewall inspection appliances or their cloud-native equivalents at the inspection point.
- Define segmentation policies that limit lateral movement between workloads and environments.
- Log and retain network flow data to support later security investigation and audit.
Session 2Private Access to Platform Services
- Configure private endpoint services to reach managed platform services without traversing the public internet.
- Control DNS resolution so private endpoints resolve correctly across peered networks.
- Restrict endpoint policies to approved services and accounts to limit exposure.
- Audit private connectivity paths against data residency and sovereignty requirements.
04Operating and Optimising the Multi-Cloud Network
2 sessions · 8 points
Session 1Cross-Cloud Monitoring and Diagnostics
- Aggregate flow logs from multiple cloud providers into a shared analysis platform.
- Build dashboards tracking cross-cloud latency, packet loss and bandwidth utilisation.
- Trace end-to-end connectivity issues across provider boundaries using consistent tooling.
- Alert on transit gateway attachment or route table changes that indicate a fault.
Session 2Cost and Performance Optimisation
- Analyse data transfer costs across regions and providers to identify avoidable cross-cloud traffic.
- Relocate latency-sensitive workloads closer to the services they depend on most heavily.
- Right-size interconnect bandwidth against measured utilisation trends rather than guesswork.
- Negotiate committed-use connectivity contracts based on verified, sustained traffic patterns.
What the participant receives
4 course modules
A structured syllabus
8 training sessions
across 5 days
32 detailed points
Applied, detailed content
Accredited attendance certificate
On completing the programme
Complete your registration
We will contact you within one business day to confirm.
Ready to start?
Reserve your seat and start building the skill.