Examkin

Question

Difficulty: MediumHigh-Performing and Scalable Network Architectures

A manufacturing corporation needs to establish a secure, encrypted network connection between its on-premises factory control center and three VPCs in the us-west-2 Region. The network must support a sustained transfer rate of at least 2 Gbps2\text{ Gbps} to replicate real-time telemetry data to AWS. Which TWO actions should a solutions architect take to design a high-performing and scalable network architecture? (Select TWO.)

  1. Create an AWS Transit Gateway and enable Equal-Cost Multi-Path (ECMP) routing.Answer
  2. Establish multiple AWS Site-to-Site VPN tunnels with dynamic routing using Border Gateway Protocol (BGP) terminated on the Transit Gateway.Answer
  3. C
    Establish a single AWS Site-to-Site VPN connection terminated on a Virtual Private Gateway (VGW) attached to the VPCs.
  4. D
    Configure stateless Network ACLs on the Transit Gateway subnets to automatically track and permit stateful return traffic.
  5. E
    Configure Amazon Route 53 latency routing policies to dynamically distribute IP packets across the VPN tunnels.

Answer

Create an AWS Transit Gateway and enable Equal-Cost Multi-Path (ECMP) routing, and establish multiple AWS Site-to-Site VPN tunnels with dynamic routing using Border Gateway Protocol (BGP) terminated on the Transit Gateway.
To achieve a secure connection with a throughput greater than 1.25 Gbps1.25\text{ Gbps} using AWS Site-to-Site VPN, you must deploy an AWS Transit Gateway with Equal-Cost Multi-Path (ECMP) routing enabled. Dynamic routing with Border Gateway Protocol (BGP) must be configured on the VPN tunnels terminated on the Transit Gateway. This allows the network to load balance traffic across multiple active tunnels, aggregating bandwidth to meet the 2 Gbps2\text{ Gbps} requirement.

Step-by-Step Solution

1
Analyze the network throughput requirements and identifying limitations of standard VPN connections.
A single AWS VPN tunnel caps at 1.25 Gbps1.25\text{ Gbps}, so a multi-tunnel approach with load balancing is necessary to reach 2 Gbps2\text{ Gbps}.
Understanding physical limits helps design appropriate scaling architectures.
2
Enable Equal-Cost Multi-Path (ECMP) routing on AWS Transit Gateway.
AWS Transit Gateway will distribute traffic evenly across multiple active paths that have equal routing costs.
ECMP is required to route traffic across multiple VPN tunnels simultaneously.
3
Configure dynamic routing using Border Gateway Protocol (BGP) for the VPN connections.
BGP dynamically advertises routes across multiple tunnels, allowing ECMP to balance the load.
Dynamic routing enables path state propagation and is required for ECMP on AWS Transit Gateway VPN attachments.

Key Concept

Scaling VPN bandwidth using AWS Transit Gateway and ECMP routing.
Rate this question

Topics

High-Performing and Scalable Network Architectures

More questions from this topic