Examkin

Question

Difficulty: MediumDesigning Network Architecture and Hybrid Connectivity

A smart grid energy company is designing a hybrid cloud connectivity topology between its primary operational control center on-premises and Google Cloud. The telemetry ingest workload requires a minimum sustained throughput of 12 Gbps and an availability SLA of 99.99%. Furthermore, the on-premises controllers must communicate with resources distributed across multiple workloads in distinct Virtual Private Clouds (VPCs) via a central hub VPC. How should the cloud architect design the hybrid network topology to meet all bandwidth, SLA, and routing requirements?

  1. Provision a 99.99% availability Dedicated Interconnect topology connected to the hub VPC, and deploy Network Connectivity Center (NCC) with Cloud Router to manage hybrid dynamic routing to the spoke VPCs.Answer
  2. B
    Deploy multiple High Availability (HA) Cloud VPN tunnels with dynamic BGP routing to the central hub VPC, and utilize VPC Network Peering to automatically route traffic from on-premises to the remaining service VPCs.
  3. C
    Establish a 99.99% availability Dedicated Interconnect connected to the central hub VPC, and configure VPC Network Peering directly between the hub VPC and all service VPCs to route on-premises traffic transitively.
  4. D
    Deploy four HA Cloud VPN tunnels aggregated together, and configure static routes in the central hub VPC to forward on-premises packets transitively across peered VPC networks.

Answer

Provision a 99.99% availability Dedicated Interconnect topology connected to the hub VPC, and deploy Network Connectivity Center (NCC) with Cloud Router to manage hybrid dynamic routing to the spoke VPCs.
Dedicated Interconnect provides 10 Gbps or 100 Gbps physical circuits capable of meeting the sustained 12 Gbps requirement and can be deployed across dual edge availability domains for a 99.99% SLA. Combining this with Network Connectivity Center or Shared VPC enables proper dynamic routing without relying on unsupported VPC Peering transitivity.

Step-by-Step Solution

1
Evaluate throughput and SLA requirements for hybrid connectivity.
Sustained 12 Gbps throughput exceeds standard Cloud VPN tunnel capacities (3 Gbps per tunnel) and requires Dedicated Interconnect (10 Gbps or 100 Gbps circuits) to achieve enterprise reliability and 99.99% SLA.
Dedicated Interconnect is the recommended GCP solution for bandwidth requirements exceeding 10 Gbps and strict high-availability SLAs.
2
Evaluate multi-VPC routing topology for on-premises access.
VPC Network Peering does not support transitive routing (i.e., on-premises -> Hub VPC -> Peered VPC). Network Connectivity Center (NCC) or a Shared VPC architecture must be used to allow hybrid on-premises access to multiple VPCs.
VPC Network Peering only exchanges routes between directly peered VPCs and blocks transitive traffic from external hybrid connections.

Key Concept

Hybrid Connectivity Selection & VPC Peering Non-Transitivity
Rate this question

Topics

Designing Network Architecture and Hybrid Connectivity