I wish to seek some advice as we evaluate a re-design of our WAN structure.
Currently we have multiple offices around the world. Our current design is a full-mesh IPSec network over the commodity internet.
We now have 3 offices designated as data-centers that all other offices will access. However, we also have a requirement that every office be able to access every other office.
Given three datacenters the thought would have been a distributed hub-and-spoke, as an alternative to the full mesh, but the management of that is as duanting as the full mesh topology.
Can anyone suggest a simpler way to connect every office to every other office in a manageable fashion?
My first thought was laying out an MPLS VPN structure to provide connectivity and easy management, but I have no experience with MPLS.
Thank you so much for your time.