Examkin

Question

Difficulty: HardDesigning Network Architecture and Hybrid Connectivity

An enterprise financial organization is designing hybrid connectivity between its primary on-premises data center and Google Cloud. The architecture requires a sustained throughput of 15 Gbps with an availability SLA of 99.99%. Additionally, on-premises systems must seamlessly reach application workloads distributed across multiple business units without encountering routing limitations between networks. Which hybrid networking architecture meets these requirements on Google Cloud?

  1. Provision a 99.99% High Availability Dedicated Interconnect topology using four VLAN attachments across two metropolitan locations, and deploy a Shared VPC architecture where host and service projects share the Interconnect paths.Answer
  2. B
    Provision multiple High Availability (HA) Cloud VPN tunnels configured with BGP dynamic routing and Equal-Cost Multi-Path (ECMP) to achieve 15 Gbps aggregate throughput, connected to a central Hub VPC network.
  3. C
    Establish a 99.99% HA Dedicated Interconnect topology into a central Hub VPC network, and utilize VPC Network Peering to transitively route traffic from on-premises through the Hub VPC to spoke VPC networks.
  4. D
    Deploy a 99.99% HA Partner Interconnect connection using a single service provider with static routing configured on Cloud Routers across two regional VPC networks.

Answer

Provision a 99.99% High Availability Dedicated Interconnect topology using four VLAN attachments across two metropolitan locations, and deploy a Shared VPC architecture where host and service projects share the Interconnect paths.
To support 15 Gbps of sustained hybrid traffic with a 99.99% availability SLA, Google Cloud requires Dedicated Interconnect deployed across two metropolitan locations with four total VLAN attachments (two per metro). To allow on-premises systems to reach workloads across multiple business units without hitting VPC Network Peering's non-transitivity limit, deploying a Shared VPC topology is required so service project workloads natively share host VPC network paths.

Step-by-Step Solution

1
Evaluate throughput and SLA requirements for hybrid connectivity
Sustained bandwidth of 15 Gbps exceeds Cloud VPN capacity (3 Gbps per tunnel limit), requiring Dedicated Interconnect. Achieving a 99.99% SLA requires four VLAN attachments across two metropolitan locations with Cloud Routers in each region.
Dedicated Interconnect is necessary for bandwidth requirements above 10 Gbps and strict 99.99% SLA enterprise topologies.
2
Analyze multi-project network connectivity constraints
VPC Network Peering does not support transitive routing, preventing on-premises traffic from passing through a Hub VPC to spoke VPCs. Shared VPC enables service projects to utilize subnets in the host VPC directly.
Shared VPC avoids transit routing restrictions by placing workloads into host VPC subnets that directly utilize the Dedicated Interconnect.

Key Concept

Designing 99.99% SLA Dedicated Interconnect and Shared VPC to bypass VPC Peering transitivity limits
Rate this question

Topics

Designing Network Architecture and Hybrid Connectivity