Question

Difficulty: EasyOptimizing Network Performance and Latency

A company has three VPCs in the us-east-1 Region: a production VPC, a shared services VPC, and a data analytics VPC. Currently, the VPCs are interconnected using an AWS Transit Gateway. The data analytics team reports that transferring large datasets between the production VPC and the data analytics VPC is experiencing throughput bottlenecks and higher-than-expected latency. Which solution will provide the highest throughput and lowest latency for inter-VPC traffic?

  1. A
    Configure an AWS Direct Connect gateway to route transitive traffic between the production VPC and the data analytics VPC.
  2. Establish a direct VPC Peering connection between the production VPC and the data analytics VPC, and update the VPC route tables to route traffic through the peering connection.Answer
  3. C
    Deploy a single NAT Gateway in the shared services VPC and route the data transfer traffic over the public internet.
  4. D
    Associate a Route 53 Private Hosted Zone with all VPCs and configure latency-based routing records pointing to public IP addresses.

Answer

Establish a direct VPC Peering connection between the production VPC and the data analytics VPC, and update the VPC route tables to route traffic through the peering connection.
Establishing a direct VPC Peering connection provides a point-to-point network path with the lowest latency and no bandwidth limitations. While AWS Transit Gateway is excellent for managing multi-VPC spoke topologies, it adds a small latency hop and has default bandwidth limitations per connection. Point-to-point VPC Peering between the high-throughput VPCs resolves the bottleneck.

Step-by-Step Solution

1
Analyze the performance requirements.
The workload requires the lowest latency and highest throughput between two specific VPCs in the same AWS region.
Transit Gateway introduces a processing hop and default bandwidth limits (50 Gbps per VPC attachment) which can cause bottlenecks during large dataset transfers.
2
Compare connection alternatives.
VPC Peering provides a direct, single-hop connection with no bandwidth limits, routing traffic over the private AWS backbone.
Choosing VPC Peering directly bypasses the Transit Gateway performance constraints for this specific peer relationship.
3
Configure routing.
Update the route tables of both VPCs to target the peering connection for the destination VPC CIDR block.
Ensures that the traffic flows directly via the low-latency peered path instead of the default Transit Gateway route.

Key Concept

VPC Peering vs. AWS Transit Gateway Latency and Throughput Characteristics
Estimated Time:1m 0s
Rate this question