title: IN GCP Is a hub & spoke model with vpc peering better compared to using a shared vpc
body: <p>Q1: Is a hub &amp; spoke model with vpc peering better compared to using a shared vpc. See below tenancy design in AWS, we are trying to bring a similar structure.<a href="https://i.stack.imgur.com/ZUrP3.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/ZUrP3.png" alt="enter image description here"></a></p>
  
  <p>Q2: Is there any native service/virtual appliance(Firewall) or feature available to route traffic between spokes without spoke to spoke peering?</p>
  
  <p>Q3: Cross account access – Is it possible to have cross-account access</p>
  
  <p>Q4: Do we use Subnet to create zones in GCP, refer diagram above</p>
  
  <p>Q5: Is there randomization of the zones in GCP as in AWS (Zone a in one account would be Zone b in another)</p>