Examkin

Question

Difficulty: Very hardDesigning Network Architecture and Hybrid Connectivity

A global online brokerage firm is designing its hybrid network topology to connect two primary on-premises data centers (located in Chicago and London) to Google Cloud. The architecture requires a sustained throughput of 15 Gbps per location with a 99.99% availability Service Level Agreement (SLA). Additionally, on-premises systems in Chicago must be able to reach GCP resources deployed in the Europe region (europe-west2) via the GCP backbone if the direct London link experiences a physical fiber disruption, without requiring custom overlay tunnels or virtual network appliances. Which network architecture should the Principal Cloud Architect recommend to meet these performance, redundancy, and routing requirements?

  1. Provision two 10 Gbps Dedicated Interconnect connections at separate edge availability domains in both us-central1 and europe-west2, configure a single Shared VPC with Global Dynamic Routing enabled, and establish BGP sessions on Cloud Routers in both regions.Answer
  2. B
    Deploy six HA VPN tunnels per region grouped with equal-cost multi-path (ECMP) routing to aggregate bandwidth to 18 Gbps, and configure Cloud Routers with Regional Dynamic Routing in separate VPC networks for us-central1 and europe-west2.
  3. C
    Establish Dedicated Interconnect connections in us-central1 and europe-west2 into separate standalone VPC networks for each region, and set up VPC Network Peering between the us-central1 VPC and europe-west2 VPC to route on-premises Chicago traffic across the peering connection.
  4. D
    Provision Dedicated Interconnect connections in us-central1 for 15 Gbps throughput, deploy HA VPN gateways in europe-west2 for cost optimization, and peer the two regional VPC networks together using custom route exchanges.

Answer

Provision two 10 Gbps Dedicated Interconnect connections at separate edge availability domains in both us-central1 and europe-west2, configure a single Shared VPC with Global Dynamic Routing enabled, and establish BGP sessions on Cloud Routers in both regions.
Dedicated Interconnect is required for bandwidth exceeding 3 Gbps per tunnel and for achieving a 99.99% SLA using redundant circuits across two metropolitan edge availability domains per region. Utilizing a single Shared VPC (or global VPC) with Global Dynamic Routing enables BGP route propagation across regions over GCP's private fiber backbone, allowing traffic from the Chicago data center to reach europe-west2 resources if the local London connection drops, without hitting non-transitive VPC Peering limits.

Step-by-Step Solution

1
Evaluate hybrid connectivity bandwidth and SLA requirements.
Requirements specify 15 Gbps sustained throughput and 99.99% SLA. Dedicated Interconnect (using 10 Gbps or 100 Gbps circuits across two edge availability domains per region) is required, as Cloud VPN maxes out at 3 Gbps per tunnel.
HA VPN cannot meet the 15 Gbps SLA guarantee or single-pipe performance expectations for high-throughput enterprise connectivity.
2
Analyze cross-region failover and transitivity constraints.
On-premises systems in one site must reach GCP resources in another region via the GCP global network if local link fails.
VPC Network Peering does not support transitive routing (on-premises to VPC A to VPC B is prohibited). A unified Shared VPC (or VPC connected via Cloud Router with Global Dynamic Routing) must be used.
3
Select the proper dynamic routing scope.
Enable Global Dynamic Routing on the VPC network containing the Cloud Routers.
Global Dynamic Routing allows Cloud Routers in us-central1 to advertise routes learned via BGP in europe-west2 to the Chicago data center, allowing seamless failover across GCP's global backbone.

Key Concept

Hybrid Connectivity Selection & Global Dynamic Routing Transitivity
Rate this question

Topics

Designing Network Architecture and Hybrid Connectivity