In a hub-and-spoke topology, all branch sites connect to a central headquarters. If you have branches, you maintain tunnels from the hub.
Traffic between branches flows through the hub. If Site A wants to reach Site B, packets go Site A -> Hub -> Site B. This simplifies management since you configure only the hub and each spoke. The downside is that branch-to-branch traffic takes an extra hop and consumes hub bandwidth.