Examkin

Question

Difficulty: MediumCost-Effective Network Routing and Data Transfer Optimization

A media company hosts a video rendering application on Amazon EC2 instances inside a private subnet of a VPC. Every month, the application transfers 30 TB30\text{ TB} of rendered video files from the VPC to an on-premises storage repository. Currently, this transfer occurs over a 1 Gbps1\text{ Gbps} AWS Site-to-Site VPN connection. The company wants to reduce the high data transfer out (DTO) charges associated with this replication. Which solution will minimize the monthly data transfer costs most effectively?

  1. A
    Deploy an AWS NAT Gateway in a public subnet of the VPC and route all replication traffic through it to the existing Site-to-Site VPN.
  2. B
    Configure an AWS Transit Gateway and establish multiple Site-to-Site VPN connections using Equal-Cost Multi-Path (ECMP) routing to load balance the replication traffic.
  3. Establish an AWS Direct Connect connection and configure a Private Virtual Interface (VIF) to route the replication traffic directly to the on-premises network.Answer
  4. D
    Set up a public virtual interface (VIF) on an AWS Direct Connect connection and route the replication traffic through a NAT Gateway deployed in the VPC.

Answer

Establish an AWS Direct Connect connection and configure a Private Virtual Interface (VIF) to route the replication traffic directly to the on-premises network.
Establishing an AWS Direct Connect connection with a Private VIF is the most cost-effective solution. AWS Direct Connect significantly reduces the per-GB data transfer out (DTO) fee compared to standard internet-based egress (which VPN uses). A Private VIF allows private and direct connectivity from the VPC to the on-premises network without traversing the public internet or incurring additional intermediary data processing fees.

Step-by-Step Solution

1
Analyze the current network data transfer path and associated cost structure.
The current configuration uses a Site-to-Site VPN over the public internet, which incurs standard AWS data transfer out (DTO) rates (typically 0.09perGB)forthe0.09 per GB) for the 30\text{ TB}$ of egress data.
Understanding the cost driver helps identify where savings can be achieved.
2
Evaluate AWS network services that offer reduced data transfer out rates.
AWS Direct Connect provides dedicated network connections to AWS with significantly lower per-GB DTO pricing (e.g., $0.02 per GB) compared to internet egress.
Replacing VPN/internet routing with Direct Connect directly reduces the per-GB DTO charge.
3
Determine the correct virtual interface (VIF) type and routing design.
A Private VIF is required to connect to private resources within a VPC. Routing the traffic directly over the Private VIF avoids intermediate processing costs like NAT Gateway fees.
Selecting a Private VIF aligns with accessing the VPC resources, and avoiding NAT Gateway prevents an additional $0.045 per GB processing fee.

Key Concept

AWS Direct Connect Private VIF provides the most cost-effective data transfer out (DTO) rates for replicating data from a VPC to on-premises environments, avoiding both high internet egress fees and additional NAT processing charges.
Estimated Time:2m 0s
Rate this question

Topics

Cost-Effective Network Routing and Data Transfer Optimization