hybrid-cloud-networking Skill for Claude: What It Does and How to Install It
Makes Claude plan VPN and dedicated links between your data center and AWS, Azure, GCP or OCI.
- Installs
- 10.8K
- on skills.sh
- Stars
- 42.1K
- on GitHub
- Files
- 1
- besides SKILL.md
- Updated
- Oct 2026
- last repo commit
This skill is a connectivity guide for Claude, from wshobson's agents collection. It compares site-to-site VPN with dedicated links on four clouds: AWS (VPN, Direct Connect), Azure (VPN, ExpressRoute), GCP (Cloud VPN, Cloud Interconnect) and OCI (IPSec VPN Connect, FastConnect).
Terraform examples cover AWS and Azure VPN gateways. SKILL.md also lists three network patterns, BGP and route settings, ten security practices, high availability, troubleshooting commands and six cost tips. references/direct-connect.md compares the four dedicated link services. It loads when you connect on-premises systems to a cloud.
Good for
- Network engineers linking a data center to a cloud
- Cloud architects planning hybrid or multi-cloud setups
- Teams migrating to the cloud in stages
- Teams with compliance rules on cross-premises traffic
Install hybrid-cloud-networking
Claude Code
- 1
Copy this prompt.
Install the hybrid-cloud-networking skill in Claude Code. Run this command: /plugin marketplace add wshobson/agents /plugin install cloud-infrastructure@claude-code-workflows Then check that it loaded and tell me how to use it.
- 2
Paste it into Claude Code. It shows the change and asks before running it.
Pick one route. The plugin routes install the whole cloud-infrastructure plugin: 7 agents and 8 skills (counted from the plugin folder in the repo tree, which has no hooks or MCP config files). The skills-only routes install just this skill, with no agents or commands. The skill's examples use Terraform and the aws, az and oci command line tools.
From the project README. Source.
What's in the skill
When it loads
Configure secure, high-performance connectivity between on-premises infrastructure and cloud platforms using VPN and dedicated connections. Use when building hybrid cloud architectures, connecting data centers to cloud, or implementing secure cross-premises networking.
Sections in SKILL.md
- Purpose
- When to Use
- Connection Options
- AWS Connectivity
- Azure Connectivity
- GCP Connectivity
- OCI Connectivity
- Hybrid Network Patterns
- Pattern 1: Hub-and-Spoke
- Pattern 2: Multi-Region Hybrid
- Pattern 3: Multi-Cloud Hybrid
- Routing Configuration
- BGP Configuration
- Route Propagation
- Security Best Practices
- High Availability
Key facts
- Author
- wshobson (repo owner)
- License
- MIT
- Installs on skills.sh
- 10,798 (Nov 2, 2026)
- Last repo commit
- Oct 30, 2026
What it includes
VPN and dedicated links on AWS, Azure, GCP and OCI
Lists bandwidth, latency and cost trade-offs for each option, for example up to 1.25 Gbps per tunnel on AWS Site-to-Site VPN.
Try: “Compare VPN and Direct Connect for a 5 Gbps link to AWS.”
Read ·
Connection optionsAWS VPN gateway and Azure VPN gateway resources
HCL code for aws_vpn_gateway, aws_customer_gateway, aws_vpn_connection and azurerm_virtual_network_gateway.
Write ·
Terraform VPN examplesHub-and-spoke, multi-region and multi-cloud layouts
Three diagrams of how an on-premises network can reach one or several clouds.
Read ·
Hybrid network patternsBGP AS numbers and route propagation
Example AS numbers for the on-premises router and each cloud, plus route propagation and filtering tips.
Read ·
Routing configurationTen practices from private links to regular audits
A numbered list that includes encrypting VPN tunnels, VPC endpoints, flow logs and dual tunnels.
Read ·
Security best practicesDual VPN tunnels and active-active links
Terraform for two VPN connections, plus BGP failover and ECMP routing notes.
Write ·
High availabilityKey metrics and aws, az and oci CLI commands
Lists the metrics to watch and CLI commands such as aws ec2 describe-vpn-connections, az network vpn-connection show and oci network ip-sec-connection list.
Runs code ·
Monitoring and troubleshootingSix ways to cut link and transfer costs
Right-size links, use VPN for low bandwidth, consolidate traffic, cut transfer costs, use dedicated links for high bandwidth and cache.
Read ·
Cost optimizationDirect Connect, ExpressRoute, Interconnect and FastConnect (direct-connect.md)
A table of the four services and four design rules, such as redundant circuits in separate facilities and VPN as backup.
Read ·
Dedicated connectivity comparison
From the official docs
Permissions
Low risk
What it can do
- Read your data
- Create and change things
- Delete things
- Read-only mode
Watch out for
Terraform examples create cloud network resources
SKILL.md defines aws_vpn_gateway, aws_customer_gateway, aws_vpn_connection and azurerm_virtual_network_gateway resources, with placeholder values such as 203.0.113.1. Read the plan before you apply it. github.com
CLI commands run against your cloud accounts
SKILL.md lists aws ec2 describe-vpn-connections, az network vpn-connection show and oci network ip-sec-connection list. They use whatever cloud login your terminal already has. github.com
The plugin route installs more than this skill
The cloud-infrastructure plugin has 7 agents and 8 skills. We found no hooks or MCP config files in its folder. The skills-only routes install only this skill. github.com
Security advisories
No published security advisories as of Nov 2, 2026.
Technical details
| Turning on read-only | No read-only mode. Use version control. |
|---|---|
| Talks to | AWS, Azure and OCI APIs, when you run the CLI commands |
| Sign-in and keys | SKILL.md and direct-connect.md do not mention any key. The CLI commands use your existing cloud login. |
| Scopes |
|
Questions
What does the hybrid-cloud-networking skill do?
It gives Claude a playbook for linking on-premises networks to AWS, Azure, GCP and OCI. Claude uses it to compare VPN and dedicated links, and to draft routing, security and failover settings.
How do I install hybrid-cloud-networking?
Use the install box at the top of this page. Pick a skills-only route to get just this skill, or the plugin route to get the whole cloud-infrastructure plugin.
Is this skill from Anthropic?
No. It is in wshobson/agents, a community collection. The skill sits in the cloud-infrastructure plugin there.
Does it need other skills?
No. SKILL.md lists multi-cloud-architecture and terraform-module-library under Related Skills, for architecture decisions and for writing Terraform. Both are in the same cloud-infrastructure plugin, and the skill does not require them.
Does it configure my cloud account?
Not by itself. It bundles no scripts. Its Terraform examples would create network resources only if you apply them.
Does it work in the Claude app?
The install box has no Claude app upload for it, because the examples rely on Terraform and cloud command line tools. Use Claude Code or Codex. The README also lists Cursor, OpenCode, Antigravity CLI, GitHub Copilot and Pi.
Is it safe?
It bundles no scripts: just SKILL.md and one reference file. When you ask for network setup, Claude writes Terraform and may run the cloud CLI commands it lists. Review any plan before you apply it (our advice).
Information
updated Nov 2, 2026
- Repository
- wshobson/agents
- Folder
plugins/cloud-infrastructure/skills/hybrid-cloud-networking
Sources
Docs, issue trackers and discussions this page is built from.
Show all 4Hide
- hybrid-cloud-networking SKILL.md · github.com
- wshobson/agents README · github.com
- cloud-infrastructure plugin.json · github.com
- hybrid-cloud-networking references/direct-connect.md · github.com