diff --git a/l3vpn-blue-service.yaml b/l3vpn-blue-service.yaml
new file mode 100644
index 0000000..b465d7c
--- /dev/null
+++ b/l3vpn-blue-service.yaml
@@ -0,0 +1,121 @@
+apiVersion: google.dev/v1
+kind: VyOSL3VPN
+metadata:
+  name: l3vpn-blue-service
+  namespace: network
+spec:
+  ce_routers:
+  - name: ce1-spoke
+    protocols:
+      bgp:
+        as_number: 65035
+        neighbors:
+        - description: eBGP to pe1 BLUE_SPOKE VRF
+          peer: 10.50.50.1
+          remote_as: 65001
+        router_id: 10.0.0.80
+  - name: ce1-hub
+    protocols:
+      bgp:
+        as_number: 65035
+        neighbors:
+        - description: eBGP to pe2 BLUE_HUB VRF
+          peer: 10.80.80.1
+          remote_as: 65001
+        router_id: 10.0.0.100
+  - name: ce2-spoke
+    protocols:
+      bgp:
+        as_number: 65035
+        neighbors:
+        - description: eBGP to pe3 BLUE_SPOKE VRF
+          peer: 10.60.60.1
+          remote_as: 65001
+        router_id: 10.0.0.90
+  - name: ce3-spoke
+    protocols:
+      bgp:
+        as_number: 65035
+        neighbors:
+        - description: eBGP to pe4 BLUE_SPOKE VRF
+          peer: 10.70.70.1
+          remote_as: 65001
+        router_id: 10.0.0.91
+  routers:
+  - bgp:
+      vrfs:
+      - name: BLUE_SPOKE
+        neighbors:
+        - peer: 10.50.50.2
+          remote_as: 65035
+    name: pe1
+    vrfs:
+    - interfaces:
+      - eth2
+      name: BLUE_SPOKE
+      rd: 10.50.50.1:1011
+      rt_export:
+      - 65035:1011
+      rt_import:
+      - 65035:1030
+      table: 200
+  - bgp:
+      vrfs:
+      - name: BLUE_HUB
+        neighbors:
+        - peer: 10.80.80.2
+          remote_as: 65035
+    name: pe2
+    vrfs:
+    - interfaces:
+      - eth3
+      name: BLUE_HUB
+      rd: 10.80.80.1:1011
+      rt_export:
+      - 65035:1030
+      rt_import:
+      - 65035:1011
+      - 65035:1030
+      table: 400
+  - bgp:
+      vrfs:
+      - name: BLUE_SPOKE
+        neighbors:
+        - peer: 10.60.60.2
+          remote_as: 65035
+    name: pe3
+    vrfs:
+    - interfaces:
+      - eth2
+      name: BLUE_SPOKE
+      rd: 10.60.60.1:1011
+      rt_export:
+      - 65035:1011
+      rt_import:
+      - 65035:1030
+      table: 200
+  - bgp:
+      vrfs:
+      - name: BLUE_SPOKE
+        neighbors:
+        - peer: 10.70.70.2
+          remote_as: 65035
+    name: pe4
+    vrfs:
+    - interfaces:
+      - eth2
+      name: BLUE_SPOKE
+      rd: 10.70.70.1:1011
+      rt_export:
+      - 65035:1011
+      rt_import:
+      - 65035:1030
+      table: 200
+  services:
+  - name: BLUE_SPOKE
+    topology: spoke
+    type: l3vpn
+  - name: BLUE_HUB
+    topology: hub
+    type: l3vpn
+  underlayRef: l3vpn-underlay