I have a tough network routing design around service FW chaining. My customer has multiple hubs spread out around the world. They each have a firewall. The goal is to have regional remote sites traverse the closest hub thru a FW to any other regional remote site. Shrink the routing table so it doesn't include all remote sites prefixes due to the number of OMP received routes. All the hubs will know how to route to everywhere.
The challenge is summarizing 10/8 out of each hub and expecting to service FW chain to only one hub.
Below is the traffic flow I want to achieve, if possible. Also, I want to only do this using control policies not data policies due to the routes not being easily summarized out of the regions. In other words, they are all over the place.
REGIONAL REMOTE TO REMOTE - Traffic should pass through the local regional hub as transitive but final hub should always route via a FW in both directions:
US_EAST Remote --> 10/8 (US_EAST Hub transit) --> (CN Hub FW) --> CN Remote
CN Remote --> 10/8 (CN Hub FW) --> (US_EAST Hub transit) --> US_EAST Remote
US_WEST Remote --> 10/8 (US_WEST Hub transit) --> (CN Hub FW) --> CN Remote
CN Remote --> 10/8 (CN Hub FW) --> (US_WEST Hub transit) --> US_WEST Remote
US_EAST Remote --> 10/8 (US_EAST Hub transit) --> (EU Hub FW) --> EU Remote
EU Remote --> 10/8 (EU Hub FW) --> (US_EAST Hub transit) --> US_EAST Remote
US_WEST Remote --> 10/8 (US_WEST Hub transit) --> (EU Hub FW) --> EU Remote
EU Remote --> 10/8 (EU Hub FW) --> (US_WEST Hub transit) --> US_WEST Remote
LOCAL REMOTE TO REMOTE
US_EAST Remote <--> 10/8 (US_EAST FW) <--> US_EAST Remote
US_WEST Remote <--> 10/8 (US_WEST FW) <--> US_WEST Remote
EU Remote <--> 10/8 (EU_HUB FW) <--> EU Remote
CN Remote <--> 10/8 (CN_HUB FW) <--> CN Remote
