Question

Difficulty: MediumDesigning Network Architecture and Hybrid Connectivity

An enterprise architecture team for a global aerospace manufacturer is selecting Google Cloud networking solutions for various workloads during a multi-region migration. Match each Google Cloud networking service on the left with the architectural scenario requirement on the right that best justifies its implementation.

  • Dedicated InterconnectConnecting an on-premises facility directly to Google's network edge using physical 10 Gbps or 100 Gbps ports for high-throughput, non-encrypted private transport.
  • High Availability (HA) VPNConnecting a remote facility to GCP over the public internet with IPsec encryption and an SLA of 99.99% availability.
  • Partner InterconnectConnecting an on-premises data center located in a metro area where Google lacks a direct Point of Presence (PoP) through a supported service provider.
  • VPC Network PeeringInterconnecting two GCP Virtual Private Cloud (VPC) networks directly to enable low-latency, high-bandwidth internal communication without intermediate gateways.

Answer

Dedicated Interconnect matches the requirement for direct 10 Gbps/100 Gbps physical circuits at a Google edge location. HA VPN matches the requirement for 99.99% SLA IPsec encrypted connectivity over the public internet. Partner Interconnect matches the requirement for connecting via a third-party service provider where direct Google PoP access is absent. VPC Network Peering matches internal VPC-to-VPC communication without external gateways.
Each hybrid networking technology addresses distinct architecture criteria: Dedicated Interconnect delivers direct 10/100 Gbps physical circuits; HA VPN delivers SLA-backed 99.99% encrypted IPsec connectivity over the internet; Partner Interconnect connects sites via service provider networks where Google PoPs are unavailable; and VPC Network Peering provides high-bandwidth, private internal routing between VPC networks.

Step-by-Step Solution

1
Analyze high-bandwidth physical connection requirements
Dedicated Interconnect provides physical 10 Gbps or 100 Gbps connections directly to Google edge facilities.
When private throughput requirements exceed standard VPN capabilities and a direct facility connection is available, Dedicated Interconnect is required.
2
Evaluate encrypted internet-based connectivity needs
HA VPN fulfills IPsec encrypted tunnel requirements over public internet while guaranteeing 99.99% availability.
HA VPN uses active-active topologies with Cloud Router dynamic BGP routing to ensure 99.99% uptime for internet-bound hybrid traffic.
3
Determine connectivity options for remote geographical locations without Google PoPs
Partner Interconnect enables connection through supported service providers.
Partner Interconnect extends GCP private interconnect benefits to locations where the enterprise cannot colocate directly with Google.
4
Identify cloud-native intra-GCP networking mechanisms
VPC Network Peering connects separate VPCs internally within Google Cloud.
VPC Peering provides direct internal routing between VPCs without incurring performance bottlenecks or needing virtual gateways.

Key Concept

Selecting GCP Hybrid Connectivity and VPC Topology Solutions based on SLA, Bandwidth, Physical Location, and Routing Constraints
Rate this question