# Design Secure Hybrid Cloud Networks

Hybrid connectivity requires careful choices across providers, routing, security, availability, and cost. This skill provides practical patterns and configuration examples for informed network planning.

## Install

```bash
npx skillstore add sickn33/hybrid-cloud-networking
```

## Metadata

- Status: approved
- Slug: sickn33-hybrid-cloud-networking
- Skillstore revision: r1
- Version status: missing
- Tree hash: 82d2713acaa2ee66afc6cf291254c418ecc55df69b7fc4b1f028601dd2f489c7
- Author: sickn33
- GitHub username: sickn33
- License: MIT
- Repository: https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/hybrid-cloud-networking
- Ref: 88a8e9a07f4c54ab105c1c41b6267c287146b07b
- Supported tools: Claude, Codex, Claude Code
- Audit status: complete
- Agent install advisory: allowed
- Manual install advisory: allowed
- Artifact signature: available
- Audit attestation: unavailable
- Human verification: not\_verified
- Risk factors: external\_commands, network
- Quality score: 78
- Quality tier: bronze
- Public page: https://skillstore.pages.dev/skills/sickn33-hybrid-cloud-networking
- Manifest: https://skillstore.pages.dev/api/skills/sickn33-hybrid-cloud-networking/manifest

## Capabilities

- Compares VPN and dedicated connectivity options across AWS, Azure, and GCP.
- Provides illustrative Terraform configurations for AWS and Azure VPN gateways.
- Explains hub-and-spoke, multi-region, and multi-cloud hybrid network patterns.
- Outlines BGP routing, route propagation, and advertisement practices.
- Recommends security, high availability, monitoring, troubleshooting, and cost controls.

## Use Cases

- Plan a datacenter extension: Compare VPN and dedicated links for bandwidth, latency, reliability, security, and cost requirements.
- Draft provider configurations: Create a reviewed starting point for AWS or Azure hybrid gateway infrastructure.
- Improve network resilience: Assess BGP, dual tunnels, monitoring, and failover options for business-critical connectivity.

## Prompt Templates

### Compare connection options

```
Compare site-to-site VPN and dedicated connectivity for [provider], [bandwidth], [latency], [availability], and [budget]. Recommend an option and explain the tradeoffs.
```

### Outline a hybrid design

```
Design a hybrid network connecting [datacenter] to [cloud regions]. Include topology, CIDR assumptions, routing, security controls, redundancy, monitoring, and open questions.
```

### Review a proposed architecture

```
Review this hybrid network proposal: [proposal]. Identify routing conflicts, single points of failure, security gaps, observability gaps, cost concerns, and required validation.
```

### Develop a migration plan

```
Create a phased migration plan from [current network] to [target hybrid architecture]. Include dependencies, BGP policy, failover tests, rollback criteria, monitoring, and acceptance checks.
```

## Limitations

- Configuration examples are illustrative and require environment-specific resources, addresses, credentials, and validation.
- The skill does not deploy infrastructure or verify live cloud and on-premises network state.
- Provider limits, prices, features, and service availability may change after publication.
- Referenced implementation guides are not included in the scanned skill package.

## Best Practices

- Confirm CIDRs, throughput, latency, compliance, and recovery objectives before selecting connectivity.
- Use redundant paths, restrictive route policies, encryption, flow logs, and tested failover procedures.
- Validate all generated configurations in a non-production environment with provider documentation and peer review.

## Anti Patterns

- Do not apply example addresses, resource names, or route advertisements directly to production.
- Do not rely on one tunnel, one device, or one provider location for critical connectivity.
- Do not advertise broad routes without checking overlap, filtering, propagation, and failure behavior.

## Security Audit

- Audited at: 2026-07-24T00:41:26.029\+00:00
- Summary: All 40 static findings are false positives caused by Markdown backticks, documentation examples, reserved or private address ranges, and ordinary networking terms. The skill contains no executable scripts, prompt injection, secret access, or data exfiltration intent.

## Stats

- Views: 177
- Downloads: 11
- Favorites: 1
- Popularity score: 0