We have 5 Locations and are looking to add more locations soon. Sites are a mix of Intra and extra-state, and can be 1000 miles apart.
We have a Mix of resources - On-Premise Servers at HQ Site and some Azure Services (Office 365, SharePoint, Intranet Web)
We Currently have a Mix of Point to Point Ethernet to HQ and for the Smaller Offices Site to Site VPN.
The Point to Point Ethernet remote sites connect to HQ site to get to Internet and also to Azure Services.
Having the larger Locations all go through HQ for internet is nice as it is one Firewall to Manage. Though if HQ Internet goes down, all of the larger remote sites can't get to Azure Services. We could do redundant Internet connections to HQ, but if the fiber to the building has issues, All of it goes down.
We thought about having each site have their own Internet connection and Site to Site VPN into HQ so they only need HQ for Local HQ resources. Though that seems like a lot of firewalls and surface area for attack?
How do other people connect up multiple sites?