Examkin

Question

Difficulty: MediumDesigning Network Architecture and Hybrid Connectivity

A healthcare provider is extending its primary on-premises data center to Google Cloud to run high-throughput data analytics on patient records. The hybrid connection requires a predictable bandwidth of at least 8 Gbps with low latency. Additionally, a third-party diagnostics partner operating in a separate VPC is connected to the provider's central hub VPC via VPC Network Peering and needs access to the on-premises database servers. Which network architecture should a Cloud Architect design to satisfy these requirements?

  1. Provision a 10 Gbps Dedicated Interconnect connection between the on-premises data center and the central hub VPC, and configure a Dedicated Interconnect or VPN transit setup for the partner VPC because VPC Network Peering does not support transitive routing to on-premises networks.Answer
  2. B
    Provision a 10 Gbps Dedicated Interconnect connection between the on-premises data center and the central hub VPC, and rely on the existing VPC Network Peering connection to route partner VPC traffic directly to the on-premises data center.
  3. C
    Deploy three HA VPN tunnels combined using ECMP with Cloud Router to meet the 8 Gbps bandwidth requirement, and allow partner traffic to traverse the hub VPC to on-premises over the VPC Network Peering link.
  4. D
    Configure Carrier Peering to achieve 8 Gbps throughput across public IP space, and add static custom routes to the central hub VPC to enable transitive routing for the partner VPC.

Answer

Provision a 10 Gbps Dedicated Interconnect connection for the required throughput and establish a dedicated transit connection for the partner VPC because VPC Network Peering is non-transitive.
Dedicated Interconnect is required to support bandwidth demands of 8 Gbps with low latency. Furthermore, because GCP VPC Network Peering does not support transitive routing, resources in a peered VPC cannot route through the hub VPC's Cloud Router/Interconnect to reach an on-premises network unless explicit transit architecture (such as Network Connectivity Center or dedicated gateway connections) is deployed.

Step-by-Step Solution

1
Evaluate hybrid bandwidth requirement
Requirements specify at least 8 Gbps throughput, which exceeds standard HA VPN tunnel capacities (3 Gbps per tunnel) and mandates Dedicated Interconnect (10 Gbps or 100 Gbps circuits).
Dedicated Interconnect provides direct physical connections extending private IP routing at enterprise bandwidth levels.
2
Analyze VPC Network Peering routing capabilities for the partner VPC
VPC Network Peering is strictly non-transitive; traffic from the partner VPC cannot traverse the hub VPC to reach the on-premises Interconnect endpoint.
Google Cloud VPC Network Peering does not advertise routes learned from Cloud Router / Interconnect to other peered VPC networks.
3
Synthesize the complete hybrid network topology
Use Dedicated Interconnect for high-bandwidth core connectivity, and implement explicit transit architecture (such as Network Connectivity Center or separate Interconnect/VPN) for partner connectivity.
This satisfies both the bandwidth requirement and the technical boundary of non-transitive peering.

Key Concept

Hybrid network design requires choosing Dedicated Interconnect for bandwidth > 3 Gbps and accounting for the non-transitive behavior of VPC Network Peering.
Rate this question

Topics

Designing Network Architecture and Hybrid Connectivity