most large enterprises use zoned network to create layered defense against network oriented threats. for example, an enterprise typically has a credit card processing (pci-compliant) zone, a non-pci zone, a data zone, a dmz zone to proxy external user access, and an iwz zone to proxy internal user access. applications need to integrate across multiple zones. the hub and spoke model would work better in this case.