What are the minimum number of subnets required for configuring a virtual private cloud in a Cisco Catalyst SD-WAN controller cloud deployment?

One subnet is insufficient for the necessary segmentation of management, public, and private traffic components in a secure and scalable controller deployment.

Two subnets would not provide adequate segmentation for management, public, private, and internal controller communication, especially for high availability.

Three subnets might cover basic public/private/management, but typically falls short for the full functional and resilient architecture required for a controller cloud deployment, which often involves an additional private subnet for internal services or redundancy.

For a robust and best-practice Cisco Catalyst SD-WAN controller cloud deployment, at least four distinct subnets are recommended within a virtual private cloud. These usually include a management subnet, a public subnet for external reachability, a private subnet for internal controller communication, and often another private subnet for database or application-specific services, ensuring separation for security, scalability, and redundancy.