I have to replace an MPLS for a 7 site Dr's office. 6 branch sites connect to 1 corporate site and can only communicate to corporate and not with each other. Corporate can also communicate with all sites "obviously" as it serves DNS to windows A.D environment for all sites. I'm trying to emulate what they have with an SD WAN router at all sites which uses a feature called Virtual-MPLS. My problem is I'm not fully understanding how MPLS works from a functionality perspective. I keep hearing the word "Host" and I'm wondering if all branch sites are only getting out to the internet through the corporate router/firewall. Another words, is the Corporate "Host" site a bottleneck/gateway for the other branch sites? I'm assuming that the branch sites do not directly go out over the internet but the traffic runs through corporate "Host" site first. Is this how a traditional MPLS works?