Examkin

Question

Difficulty: MediumHigh-Performing and Scalable Network Architectures

A financial services firm has deployed multiple VPCs in the `us-east-1` region to host its distributed algorithmic trading application. The application components across these VPCs need to communicate with low latency and high scalability. The firm also needs to connect its on-premises database systems to all VPCs for real-time market data synchronization. The data synchronization traffic requires a secure, encrypted connection over the internet, with peak bandwidth requirements reaching up to 2.2 Gbps2.2\text{ Gbps}. Which TWO network configurations should a solutions architect recommend to satisfy these requirements?

  1. Deploy an AWS Transit Gateway to interconnect all VPCs, enabling centralized routing and simplified attachment management.Answer
  2. Establish an AWS Site-to-Site VPN connection to the AWS Transit Gateway, and enable Equal-Cost Multi-Path (ECMP) routing across multiple VPN tunnels.Answer
  3. C
    Deploy a single AWS Site-to-Site VPN connection directly to a virtual private gateway on one VPC, and use a mesh of VPC Peering connections to route the 2.2 Gbps2.2\text{ Gbps} synchronization traffic to the remaining VPCs.
  4. D
    Configure stateless Network ACLs at the subnet level in each VPC to automatically track and permit the return traffic for the 2.2 Gbps2.2\text{ Gbps} data stream without utilizing Security Groups.
  5. E
    Configure Amazon Route 53 latency-based routing policies to route on-premises database synchronization requests to the closest VPC endpoint without implementing active health checks.

Answer

Deploying an AWS Transit Gateway to interconnect the VPCs and establishing an AWS Site-to-Site VPN connection to the Transit Gateway with Equal-Cost Multi-Path (ECMP) routing enabled across multiple tunnels.
The correct configurations involve using AWS Transit Gateway to simplify routing across multiple VPCs and using AWS Site-to-Site VPN with Equal-Cost Multi-Path (ECMP) routing to aggregate throughput across multiple tunnels, satisfying the 2.2 Gbps2.2\text{ Gbps} requirement.

Step-by-Step Solution

1
Analyze the throughput requirement.
The required throughput is 2.2 Gbps2.2\text{ Gbps}, which exceeds the 1.25 Gbps1.25\text{ Gbps} limit of a single AWS Site-to-Site VPN tunnel.
Recognizing the throughput limits of standard VPN tunnels is critical for architecting scalable connections.
2
Select the appropriate routing and scaling mechanism.
Aggregating multiple VPN tunnels using Equal-Cost Multi-Path (ECMP) routing via AWS Transit Gateway scales the bandwidth capacity beyond the single tunnel threshold.
ECMP enables load balancing across multiple active paths, which meets the high-bandwidth requirement using existing internet paths.
3
Design the inter-VPC routing topology.
AWS Transit Gateway acts as a central hub, simplifying the network architecture by replacing a complex mesh of VPC Peering connections with a scalable hub-and-spoke model.
A transit gateway reduces operational complexity and improves routing performance as the number of VPCs scales.

Key Concept

High-Performing and Scalable Network Architectures
Rate this question

Topics

High-Performing and Scalable Network Architectures

More questions from this topic