Examkin

Question

Difficulty: Very hardDesigning Network Architecture and Hybrid Connectivity

A multinational pharmaceutical enterprise is designing a hybrid network topology to connect its primary on-premises genomic research laboratory with Google Cloud. The hybrid interconnect must support a continuous sustained throughput of 15 Gbps for genomic payload ingestion and mandate an uptime SLA of 99.99%. Furthermore, multiple application teams operating in distinct regional VPC networks must access on-premises databases through a central network architecture. Which networking solution fulfills the SLA, bandwidth, and transitive connectivity requirements while maintaining operational simplicity?

  1. Provision two Dedicated Interconnect connections across two distinct Google Cloud edge availability domains (EADs) in a Shared VPC host project, configure Cloud Routers with global dynamic routing, and attach spoke service projects to the Shared VPC network.Answer
  2. B
    Deploy six High Availability (HA) Cloud VPN tunnels across dual gateway pairs, configure Equal-Cost Multi-Path (ECMP) routing via Cloud Router in a central transit VPC, and connect regional spoke VPCs via standard VPC Network Peering.
  3. C
    Provision two 10 Gbps Dedicated Interconnect circuits attached to a central transit VPC, configure regional dynamic routing on Cloud Routers, and establish standard VPC Network Peering between the central transit VPC and all regional spoke VPCs.
  4. D
    Deploy a single 100 Gbps Dedicated Interconnect circuit in one edge availability domain, establish classic VPN tunnels from regional spoke VPCs to the central VPC, and enable static routing on the on-premises edge router.

Answer

The optimal architecture requires deploying redundant Dedicated Interconnect connections across two edge availability domains in a Shared VPC network with global dynamic routing configured on Cloud Routers.
Provisioning two Dedicated Interconnect circuits across distinct edge availability domains satisfies the 15 Gbps bandwidth requirement and the 99.99% availability SLA. Integrating Cloud Routers with global dynamic routing inside a Shared VPC host project allows regional service project workloads to natively access on-premises resources while respecting GCP network transitivity rules.

Step-by-Step Solution

1
Evaluate throughput and SLA requirements for hybrid connectivity.
Sustained 15 Gbps bandwidth exceeds the capacity of individual Cloud VPN tunnels (3 Gbps per tunnel), necessitating Dedicated Interconnect (10 Gbps or 100 Gbps circuits). A 99.99% SLA requires dual circuits across two edge availability domains (EADs).
HA VPN is unsuitable for high-throughput baseline traffic >10 Gbps, whereas Dedicated Interconnect meets enterprise SLA and bandwidth standards.
2
Evaluate cross-VPC topology and routing transit limits.
VPC Network Peering is strictly non-transitive in GCP. Spoke VPCs cannot route traffic to on-premises via an Interconnect attached to a central Peered Transit VPC.
To grant multiple regional workload teams access to the hybrid Interconnect without overlay overhead, Shared VPC must be used where spoke service projects directly share the host project's network resources.
3
Configure dynamic routing mode.
Global dynamic routing must be enabled on Cloud Routers so that routes learned from on-premises BGP sessions are propagated across all GCP regions in the Shared VPC network.
Regional dynamic routing limits route propagation to the region of the Cloud Router, failing multi-region access requirements.

Key Concept

Designing 99.99% SLA Hybrid Connectivity and Transitive Routing with Shared VPC
Rate this question

Topics

Designing Network Architecture and Hybrid Connectivity