Examkin

Question

Difficulty: HardHigh-Performing and Scalable Network Architectures

A financial technology company is setting up a hybrid network to replicate database transactions from its on-premises mainframes to a VPC in the us−east−1us-east-1 Region. The replication throughput peaks at 2.5 Gbps2.5\text{ Gbps}, and all data must be encrypted in transit. The company wants to utilize their existing high-bandwidth internet connections rather than provisioning dedicated private lines. Which TWO configurations should a solutions architect implement to meet these requirements? (Choose two.)

  1. Create an AWS Transit Gateway and enable Equal-Cost Multi-Path (ECMP) routing support.Answer
  2. Establish multiple AWS Site-to-Site VPN connections terminating on the Transit Gateway, utilizing dynamic BGP routing.Answer
  3. C
    Establish a single AWS Site-to-Site VPN connection to a Virtual Private Gateway (VGW) and enable multi-tunnel scaling.
  4. D
    Configure stateless Network ACLs on the VPC subnets to automatically track and permit the return traffic of the replication streams.
  5. E
    Implement Amazon Route 53 latency-based routing to dynamically failover and balance the replication traffic across different VPN endpoints.

Answer

The correct configurations are to create an AWS Transit Gateway with Equal-Cost Multi-Path (ECMP) routing support enabled, and to establish multiple AWS Site-to-Site VPN connections terminating on the Transit Gateway using dynamic BGP routing.
To achieve a secure, encrypted connection over the internet that exceeds the 1.25 Gbps1.25\text{ Gbps} limit of a single VPN tunnel, you must deploy AWS Transit Gateway with Equal-Cost Multi-Path (ECMP) routing enabled. By establishing multiple Site-to-Site VPN connections to the Transit Gateway using dynamic BGP routing, AWS can balance the replication traffic across multiple active tunnels, scaling the aggregate throughput to meet the 2.5 Gbps2.5\text{ Gbps} peak requirement.

Step-by-Step Solution

1
Analyze the throughput and encryption requirements.
The replication requires 2.5 Gbps2.5\text{ Gbps} throughput with in-transit encryption over the internet.
This establishes the scale constraint, as a single standard AWS VPN tunnel provides only 1.25 Gbps1.25\text{ Gbps} of bandwidth.
2
Determine the service required to aggregate multiple VPN tunnels.
Identify AWS Transit Gateway with ECMP enabled as the solution.
ECMP allows traffic to be balanced across multiple VPN tunnels, effectively scaling the bandwidth beyond the single-tunnel limit.
3
Select the appropriate routing and connection setup.
Configure multiple Site-to-Site VPN connections using dynamic BGP routing to the Transit Gateway.
Dynamic routing enables ECMP to distribute the traffic across the active paths, achieving the aggregate bandwidth needed for the peak workload.

Key Concept

Scaling VPN throughput using Transit Gateway and ECMP
Rate this question

Topics

High-Performing and Scalable Network Architectures

More questions from this topic