Question

Difficulty: EasyHigh-Performing and Scalable Network Architectures

An organization is migrating a high-volume data ingestion system to AWS. The migration requires transferring large datasets from an on-premises storage system to Amazon EC2 instances in a single VPC, requiring a constant network bandwidth of at least 2 Gbps2\text{ Gbps}. Which two connectivity configurations can support this bandwidth requirement? (Select TWO.)

  1. A dedicated 10 Gbps10\text{ Gbps} AWS Direct Connect connectionAnswer
  2. An AWS Transit Gateway integration using multiple Site-to-Site VPN connections with ECMP enabledAnswer
  3. C
    A standard AWS Site-to-Site VPN connection utilizing a single tunnel
  4. D
    A stateless Network Access Control List (NACL) configured to double the bandwidth of a single VPN connection
  5. E
    Amazon Route 53 latency-based routing to automatically distribute the data transfer load across two Virtual Private Gateways

Answer

The correct configurations are a dedicated 10 Gbps10\text{ Gbps} AWS Direct Connect connection and an AWS Transit Gateway integration using multiple Site-to-Site VPN connections with ECMP enabled.
The correct configurations are a dedicated 10 Gbps10\text{ Gbps} AWS Direct Connect connection and an AWS Transit Gateway integration using multiple Site-to-Site VPN connections with ECMP enabled. A dedicated Direct Connect connection easily meets the 2 Gbps2\text{ Gbps} requirement by establishing a private physical connection of up to 10 Gbps10\text{ Gbps} or 100 Gbps100\text{ Gbps}. Alternatively, by enabling Equal-Cost Multi-Path (ECMP) routing on AWS Transit Gateway, multiple Site-to-Site VPN tunnels can be aggregated to bypass the single-tunnel limit of 1.25 Gbps1.25\text{ Gbps}, successfully scaling the throughput beyond 2 Gbps2\text{ Gbps}.

Step-by-Step Solution

1
Evaluate the bandwidth requirement against the default limits of a single AWS Site-to-Site VPN tunnel.
A single VPN tunnel is limited to 1.25 Gbps1.25\text{ Gbps}, which is insufficient for the 2 Gbps2\text{ Gbps} requirement.
This establishes the need for either Direct Connect or an aggregated VPN architecture.
2
Identify valid high-throughput options that can scale beyond the 1.25 Gbps1.25\text{ Gbps} limit.
A 10 Gbps10\text{ Gbps} Direct Connect connection provides dedicated private bandwidth, while Transit Gateway with ECMP allows load-balancing across multiple VPN tunnels to aggregate bandwidth.
These solutions directly address the requirement for a scalable, high-performance network connection.

Key Concept

AWS network throughput scalability and limitations, specifically the 1.25 Gbps1.25\text{ Gbps} limit per Site-to-Site VPN tunnel and the options to scale bandwidth using Direct Connect or Transit Gateway with ECMP.
Rate this question