Examkin

Question

Difficulty: MediumHigh-Performing and Scalable Network Architectures

A company is replicating large daily backups from their on-premises data center to Amazon S3. The data replication requires a consistent network throughput of at least 3 Gbps3\text{ Gbps} during peak transfer windows. Currently, the company uses a single AWS Site-to-Site VPN connection to AWS, but they are experiencing severe replication delays. Which solution should the solutions architect implement to meet these requirements?

  1. Establish a dedicated AWS Direct Connect connection with a capacity of 10 Gbps10\text{ Gbps} to route replication traffic directly to AWS.Answer
  2. B
    Configure a single AWS Site-to-Site VPN connection with a custom customer gateway to scale the bandwidth of the single IPsec tunnel up to 4 Gbps4\text{ Gbps}.
  3. C
    Set up a VPC Peering connection between the on-premises network and the target AWS VPC, adjusting the Network ACLs to allow the replication traffic.
  4. D
    Apply an Amazon Route 53 Latency Routing policy to route the replication traffic over the existing VPN connection to the closest AWS endpoint.

Answer

Establish a dedicated AWS Direct Connect connection with a capacity of 10 Gbps10\text{ Gbps} to route replication traffic directly to AWS.
Establishing an AWS Direct Connect connection provides a dedicated, private network connection from the on-premises data center to AWS. Direct Connect supports bandwidth options of 1 Gbps1\text{ Gbps}, 10 Gbps10\text{ Gbps}, or 100 Gbps100\text{ Gbps} (and sub-1 Gbps1\text{ Gbps} hosted connections), which easily accommodates the required 3 Gbps3\text{ Gbps} throughput without the overhead and limitations of the public internet or IPsec VPNs.

Step-by-Step Solution

1
Identify the throughput requirement (3 Gbps3\text{ Gbps}) and the limitations of the current Site-to-Site VPN.
Recognized that a single VPN tunnel cannot support 3 Gbps3\text{ Gbps} due to its 1.25 Gbps1.25\text{ Gbps} throughput cap.
Determines why the current network setup is insufficient.
2
Evaluate alternative AWS hybrid networking solutions that support dedicated high-bandwidth throughput.
Identified AWS Direct Connect as a service that offers dedicated connections of 1 Gbps1\text{ Gbps}, 10 Gbps10\text{ Gbps}, or 100 Gbps100\text{ Gbps}.
Filters available services based on performance capabilities.
3
Select the configuration that meets the bandwidth requirement.
Choosing a 10 Gbps10\text{ Gbps} Direct Connect connection accommodates the 3 Gbps3\text{ Gbps} traffic comfortably with scalability for future growth.
Matches the workload requirements with the correct Direct Connect connection capacity.

Key Concept

AWS Direct Connect provides dedicated, high-throughput, private network connections to AWS, bypassing the internet and overcoming VPN bandwidth limits.
Rate this question

Topics

High-Performing and Scalable Network Architectures

More questions from this topic