A cloud engineer needs to connect an on-premises data center to a Google Cloud Virtual Private Cloud (VPC) using a highly available VPN with dynamic route propagation. Which TWO of the following resources must be configured within Google Cloud to meet this requirement?
- A Cloud Router deployed in the target VPC network and region to manage Border Gateway Protocol (BGP) sessions.Answer
- An HA VPN gateway configured with dual interfaces connected to IPsec VPN tunnels.Answer
- CVPC Network Peering enabled between the on-premises router and the Google Cloud VPC network.
- DStatic custom routes configured on the VPC network pointing to on-premises gateway IP addresses.
- EVPC Service Controls perimeters configured to allow IPsec network traffic between on-premises and GCP.
Answer
Deploying a Cloud Router in the target VPC region for dynamic BGP routing and provisioning an HA VPN gateway with dual interfaces linked to the Cloud Router are the two required configuration steps.
Establishing a high availability hybrid connection with dynamic routing in Google Cloud requires deploying an HA VPN gateway (which supplies dual active interfaces for tunnel redundancy) alongside a Cloud Router (which manages BGP sessions to exchange dynamic routes automatically with the on-premises gateway).
Step-by-Step Solution
Key Concept
Configuring HA VPN and Cloud Router for dynamic hybrid connectivity