Question

Difficulty: Very hardConfiguring Network Topology and VPC Infrastructure

An enterprise organization is configuring a global Shared VPC network on Google Cloud spanning the us-central1 and europe-west1 regions. On-premises data centers are connected to us-central1 via a pair of Dedicated Interconnect attachments with BGP sessions established on regional Cloud Routers. Workloads deployed in europe-west1 require low-latency connectivity to on-premises databases, and workloads in both regions must seamlessly reach internal load balancers deployed in either region. The network administration team must ensure optimal route propagation across all regions without introducing unnecessary VPN overlays or invalid routing assumptions. Which VPC network topology configuration meets these requirements?

  1. Set the Shared VPC dynamic routing mode to Global, enabling Cloud Routers in us-central1 to dynamically propagate learned on-premises BGP routes across all regions to instances in europe-west1.Answer
  2. B
    Provision a separate regional VPC network in europe-west1, create a VPC Network Peering connection between the europe-west1 VPC and the us-central1 VPC, and rely on standard VPC Peering to transitively forward on-premises traffic received over Dedicated Interconnect.
  3. C
    Maintain the default Regional Dynamic Routing mode on the Shared VPC, and establish an IPsec HA VPN tunnel between Cloud Routers in europe-west1 and us-central1 to manually relay on-premises BGP routes between regions.
  4. D
    Configure VPC Service Controls security perimeters around us-central1 and europe-west1 projects to automatically bridge cross-region internal load balancer IP addresses and bypass Cloud Router requirements.

Answer

Setting the Shared VPC dynamic routing mode to Global allows regional Cloud Routers to automatically propagate on-premises routes globally to all subnets across regions.
Enabling Global Dynamic Routing on a GCP Virtual Private Cloud (VPC) network configures Cloud Routers to advertise and propagate learned BGP routes across all regions within that VPC. This enables instances in europe-west1 to seamlessly communicate with on-premises networks via the Dedicated Interconnect attached in us-central1 without extra tunnels or complex routing architectures.

Step-by-Step Solution

1
Analyze the network requirement for cross-region route propagation from Dedicated Interconnect.
Identified that Dedicated Interconnect BGP sessions terminate on regional Cloud Routers in us-central1.
By default, Regional Dynamic Routing limits route learning to resources in the same region as the Cloud Router.
2
Evaluate GCP VPC dynamic routing modes.
Global Dynamic Routing enables Cloud Routers to share learned routes with resources in all regions of the VPC network.
This allows workloads in europe-west1 to natively use on-premises routes learned by Cloud Routers in us-central1.
3
Verify inter-region internal load balancer access.
Global Dynamic Routing also allows internal HTTP(S) and L4 internal load balancers to be accessed globally within the same VPC network.
Global access settings combined with Global Dynamic Routing satisfy all multi-region connectivity criteria cleanly.

Key Concept

VPC Global Dynamic Routing and Route Propagation
Estimated Time:3m 0s
Rate this question