Hybrid Reachability Visualizer

Why Can't These VNets Talk?

Draw an Azure hybrid topology: VNets, peerings, gateways, on-prem sites, and see whether any two endpoints can actually talk. Every verdict comes with the why: non-transitive peering, missing forwarded-traffic flags, no transit appliance in the hub. Built because spoke-to-spoke "just works" is the most common wrong assumption in hub-and-spoke designs. Everything runs in your browser; share links are opt-in.

Hub10.0.0.0/16ER GWNVASpoke-A10.1.0.0/16Spoke-B10.2.0.0/16Spoke-C10.3.0.0/16On-Prem DC192.168.0.0/16

Nothing selected

Click a VNet, site, or peering line on the canvas to edit it. Pick From and To in the toolbar (or click a matrix cell) to run a reachability query.

4 VNets · 1 sites · 3 peeringsLocal only · nothing leaves your browser