Examkin

Question

Difficulty: MediumDesigning Network Architecture and Hybrid Connectivity

A global digital publishing enterprise is designing a hybrid network architecture to connect its on-premises content repository to a Google Cloud Virtual Private Cloud (VPC). The architecture requires dedicated bandwidth of 20 Gbps, dynamic BGP routing, and a 99.99% availability SLA. Additionally, on-premises hosts must securely reach Google APIs without traversing the public internet. Which TWO architectural recommendations should the cloud architect make to meet these requirements?

  1. Provision Dedicated Interconnect connections across two separate Google Cloud edge availability domains (metropolitan areas) using Cloud Routers for dynamic BGP routing.Answer
  2. Configure Private Google Access for on-premises hosts by advertising Google API IP ranges (such as 199.36.90.4/30 or 199.36.90.8/30) over BGP via Cloud Router.Answer
  3. C
    Deploy HA VPN gateways with multiple aggregated IPsec tunnels over public internet links to satisfy the 20 Gbps throughput and 99.99% SLA requirements.
  4. D
    Establish VPC Network Peering directly between the on-premises network routers and the Google Cloud VPC to provide transitive routing to Google APIs.

Answer

To meet the 20 Gbps bandwidth requirement with a 99.99% availability SLA and secure access to Google APIs, the architect must provision Dedicated Interconnect connections across two distinct edge availability domains using Cloud Routers with BGP, and configure Private Google Access for on-premises hosts by advertising Google API VIP ranges via Cloud Router.
The solution requires Dedicated Interconnect spanning two Google Cloud edge availability domains (metropolitan areas) to support 20 Gbps sustained throughput while satisfying GCP's structural prerequisites for a 99.99% SLA. In addition, enabling Private Google Access for on-premises hosts via Cloud Router BGP custom route advertisements allows on-premises systems to communicate with Google services over private Interconnect links without traversing public internet routes.

Step-by-Step Solution

1
Analyze bandwidth and availability SLA requirements for hybrid connectivity.
20 Gbps throughput exceeds standard single HA VPN tunnel capacities (3 Gbps per tunnel). Dedicated Interconnect with multiple 10 Gbps circuits is required. To achieve GCP's 99.99% SLA topology, circuits must terminate in two separate metropolitan edge domains with Cloud Routers in each region.
Dedicated Interconnect provides enterprise-grade dedicated physical links, and dual-metro redundancy guarantees 99.99% SLA.
2
Determine the solution for on-premises access to Google APIs without public internet exposure.
Private Google Access for on-premises hosts must be enabled by configuring custom route advertisements for Google VIP ranges via BGP on Cloud Router.
This routes traffic from on-premises hosts through the private Interconnect pipe directly to Google APIs without going over the public internet.

Key Concept

Designing 99.99% SLA High-Availability Dedicated Interconnect and Private Google Access for On-Premises
Estimated Time:2m 0s
Rate this question

Topics

Designing Network Architecture and Hybrid Connectivity