Question

Difficulty: MediumConfiguring Hybrid Connectivity and VPN Interconnects

An automotive manufacturing company is integrating its on-premises industrial automation control center with its Google Cloud Virtual Private Cloud (VPC) environment. The application requires a dedicated, private network link supporting 50 Gbps bandwidth, low latency without public internet routing, and dynamic BGP route propagation across multiple regions. The company's equipment is already present in a Google Cloud co-location facility. Which hybrid connectivity architecture should the cloud architect implement?

  1. Establish Dedicated Interconnect connections at the co-location facility using VLAN attachments paired with Cloud Routers for dynamic BGP routing.Answer
  2. B
    Deploy High Availability (HA) Cloud VPN gateways over public internet links to encapsulate all 50 Gbps traffic within IPsec tunnels.
  3. C
    Configure VPC Network Peering directly between the on-premises router interfaces and the target Google Cloud VPC network.
  4. D
    Implement VPC Service Controls perimeters with perimeter bridges to extend cloud security boundaries directly to on-premises IP subnets.

Answer

Establish Dedicated Interconnect connections at the co-location facility using VLAN attachments paired with Cloud Routers for dynamic BGP routing.
Dedicated Interconnect provides a direct, private physical connection between on-premises networks at a co-location facility and Google Cloud's network. With capacities starting at 10 Gbps and 100 Gbps per link, it easily accommodates a 50 Gbps requirement without traversing the public internet. Coupled with Cloud Router and VLAN attachments, it enables dynamic BGP route exchanges.

Step-by-Step Solution

1
Analyze bandwidth and latency requirements
The requirement calls for 50 Gbps throughput, low latency, and zero public internet exposure.
VPN options (HA Cloud VPN) are limited to 3 Gbps per tunnel and run over public internet, failing high-throughput criteria.
2
Evaluate physical presence and interconnect type
Since the enterprise equipment is co-located in a supported Google Cloud facility, Dedicated Interconnect (offering 10 Gbps and 100 Gbps pipes) is the exact match.
Partner Interconnect is used primarily when equipment is not in a Google co-location facility or when throughput is below 10 Gbps.
3
Configure dynamic routing components
Pair VLAN attachments on the Interconnect with Cloud Routers to exchange routes via BGP.
Cloud Router provides dynamic BGP route advertisement across VPC regions.

Key Concept

Selecting and configuring Dedicated Interconnect with Cloud Router for high-throughput, low-latency hybrid connectivity.
Estimated Time:1m 30s
Rate this question