Question

Difficulty: HardHigh-Performing and Scalable Network Architectures

A global gaming platform is designing a network architecture to connect its on-premises development facility to multiple VPCs across different AWS Regions. The on-premises connection must be highly resilient, low-latency, and support a continuous simulation data stream of up to 5 Gbps5\text{ Gbps}. Additionally, the company hosts dynamic player APIs in both the `us-east-1` and `eu-west-1` Regions. Global players require the lowest possible network latency and high availability when accessing these dynamic endpoints. Which combination of AWS network architectures should a solutions architect implement to meet these requirements? (Select TWO.)

  1. Establish an AWS Direct Connect connection to a Direct Connect gateway, and attach it to an AWS Transit Gateway to route traffic to the VPCs across multiple Regions.Answer
  2. Deploy AWS Global Accelerator to route dynamic player API traffic to the endpoints in both Regions using anycast IP addresses.Answer
  3. C
    Set up a single AWS Site-to-Site VPN connection to a Transit Gateway to securely transport the 5 Gbps5\text{ Gbps} simulation data stream over the internet.
  4. D
    Configure Amazon Route 53 latency-based routing policies to route dynamic API requests, relying on DNS caching to minimize latency for players.
  5. E
    Create a full mesh of VPC Peering connections between all Regions, and apply stateful Network Access Control Lists (NACLs) to manage access policies.

Answer

The correct architecture combination includes establishing an AWS Direct Connect connection to a Direct Connect gateway attached to an AWS Transit Gateway, and deploying AWS Global Accelerator to route dynamic player API traffic using anycast IP addresses.
Establishing an AWS Direct Connect connection connected to a Direct Connect gateway and attached to an AWS Transit Gateway is the correct solution for the hybrid network. Direct Connect provides high bandwidth (up to 100 Gbps100\text{ Gbps}) and low latency. Utilizing AWS Global Accelerator is the correct solution for player API traffic because it assigns anycast IP addresses that route traffic over the fast, congestion-free AWS global backbone network directly to the healthy ALB endpoints, bypassing the public internet.

Step-by-Step Solution

1
Analyze the on-premises throughput and multi-Region connection requirements.
Identify that the on-premises connection needs to support 5 Gbps5\text{ Gbps} across multiple Regions with low latency.
Since a single VPN tunnel is limited to 1.25 Gbps1.25\text{ Gbps}, AWS Direct Connect is required to meet the high bandwidth demand. Using a Direct Connect gateway with AWS Transit Gateway enables routing to multiple VPCs across different Regions.
2
Analyze the player API acceleration requirements for lowest latency and high availability.
Identify that the dynamic APIs are deployed in two Regions (`us-east-1` and `eu-west-1`) and require network acceleration.
AWS Global Accelerator uses anycast IP addresses to ingest traffic at edge locations and routes it over the high-performing AWS global network, which minimizes network hops and latency.
3
Evaluate and eliminate incorrect architectures.
Discard VPN due to bandwidth limits, Route 53 latency routing because it does not optimize TCP path latency, and stateful NACLs with VPC Peering because NACLs are stateless.
Eliminating invalid configurations ensures the proposed combination is both correct and optimal.

Key Concept

Designing high-performance, low-latency, and high-throughput hybrid and global network architectures using AWS Direct Connect, AWS Transit Gateway, and AWS Global Accelerator.
Rate this question