A company is setting up a hybrid network connection between its local office and a VPC. Th… — AWS Certified Solutions Architect - Associate

A company is setting up a hybrid network connection between its local office and a VPC. The connection requires a minimum bandwidth of $2\text{ Gbps}$ . The company implements a standard AWS Site-to-Site VPN connection, but network performance testing indicates that throughput is capped at $1.25\text{ Gbps}$ per tunnel. Which of the following actions should a solutions architect recommend to scale the VPN throughput to meet the requirement?

Associate the Site-to-Site VPN connection with an AWS Transit Gateway and enable Equal-Cost Multi-Path (ECMP) routing to aggregate throughput across multiple tunnels.Answer
B
Modify the configuration of the single VPN tunnel to dynamically scale its bandwidth capacity beyond the default $1.25\text{ Gbps}$ limit based on traffic load.
C
Adjust the Network Access Control Lists (Network ACLs) on the VPC subnets to act statefully and support larger packet sizes.
D
Apply Route 53 latency-based routing policies to distribute traffic across both VPN tunnels without utilizing an AWS Transit Gateway.

Answer

Associate the Site-to-Site VPN connection with an AWS Transit Gateway and enable Equal-Cost Multi-Path (ECMP) routing to aggregate throughput across multiple tunnels.

The correct option correctly identifies that a single AWS Site-to-Site VPN tunnel has a maximum throughput of

1.25\text{ Gbps}

. To achieve a throughput of

2\text{ Gbps}

or more, you must associate the VPN with an AWS Transit Gateway and enable Equal-Cost Multi-Path (ECMP) routing, which aggregates bandwidth across multiple active VPN tunnels.

Step-by-Step Solution

Identify the bandwidth constraint of a single AWS Site-to-Site VPN tunnel, which is capped at

1.25\text{ Gbps}

Confirming that a single tunnel cannot meet the

2\text{ Gbps}

requirement.

To determine why the current setup is underperforming and how much additional bandwidth is needed.

Leverage AWS Transit Gateway to aggregate multiple VPN connections using Equal-Cost Multi-Path (ECMP) routing.

Enabling ECMP allows traffic to be dynamically load balanced across multiple tunnels, scaling overall throughput beyond

1.25\text{ Gbps}

Transit Gateway support for ECMP allows multiple VPN tunnels to be pooled together to achieve higher aggregate throughput.

Key Concept

AWS Site-to-Site VPN throughput limits and Transit Gateway ECMP scaling

Estimated Time:1m 0s

Question

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Topics

More questions from this topic