Examkin

Question

Difficulty: Very hardDesigning Network Architecture and Hybrid Connectivity

A global media production company is architecting a hybrid connectivity solution to transfer uncompressed 4K video streams between their primary broadcast facilities in Los Angeles and Chicago, and their Google Cloud environment spanning the us-west1 and us-east1 regions. The architectural requirements dictate a sustained throughput of 20 Gbps with zero tolerance for internet jitter, private connectivity to Google APIs (such as Cloud Storage), and a strict 99.99% availability SLA that can survive the total failure of a single colocation facility or GCP region. Which hybrid network architecture should you recommend to meet all technical and availability requirements?

  1. Provision two 10 Gbps Dedicated Interconnect connections across two distinct Edge Availability Domains in a Los Angeles colocation facility, and two 10 Gbps Dedicated Interconnect connections across two distinct Edge Availability Domains in a Chicago colocation facility. Configure Cloud Routers in both us-west1 and us-east1 with Global Dynamic Routing enabled, and configure Private Google Access for on-premises hosts.Answer
  2. B
    Deploy eight High Availability (HA) VPN tunnels using Cloud Routers across us-west1 and us-east1 with multiple public IP addresses to aggregate 24 Gbps of encrypted tunnel bandwidth, utilizing Equal-Cost Multi-Path (ECMP) routing to satisfy the throughput requirement and achieve a 99.99% SLA.
  3. C
    Establish a single 20 Gbps Dedicated Interconnect pair in a Central Hub VPC located in us-west1, and configure VPC Network Peering between the Hub VPC and Spoke VPCs in us-east1 to transitively route on-premises traffic to all regions without deploying separate Cloud Routers in spoke networks.
  4. D
    Provision two 10 Gbps Partner Interconnect connections with a single service provider in Los Angeles, attached to Cloud Routers in us-west1 with Regional Dynamic Routing enabled, and rely on Cloud NAT for private access to Google APIs.

Answer

Provision two 10 Gbps Dedicated Interconnect connections across two distinct Edge Availability Domains in a Los Angeles colocation facility, and two 10 Gbps Dedicated Interconnect connections across two distinct Edge Availability Domains in a Chicago colocation facility, with Global Dynamic Routing enabled on Cloud Routers in both GCP regions and Private Google Access for on-premises hosts.
To achieve a 99.99% availability SLA with Google Cloud Dedicated Interconnect, an organization must deploy four Interconnect connections across two distinct metropolitan areas (colocation facilities), with two connections in each metro placed in separate Edge Availability Domains (EADs). Enabling Global Dynamic Routing on Cloud Routers ensures BGP routes are propagated to and from all regions in the VPC network. Additionally, Private Google Access for on-premises hosts allows internal datacenter servers to securely reach Google APIs like Cloud Storage over the private Interconnect link without traversing the public internet.

Step-by-Step Solution

1
Analyze throughput and SLA requirements
Sustained 20 Gbps bandwidth without public internet traversal rules out HA VPN. A 99.99% availability SLA requires 4 Dedicated Interconnect circuits across 2 metros (2 circuits per metro in separate Edge Availability Domains).
HA VPN is limited to 3 Gbps per tunnel over the public internet, whereas Dedicated Interconnect provides private 10 Gbps or 100 Gbps pipes with deterministic latency.
2
Determine dynamic routing configuration across regions
Global Dynamic Routing must be enabled on Cloud Routers in both us-west1 and us-east1.
Global Dynamic Routing allows Cloud Routers to advertise and learn BGP routes across all regions within the VPC, facilitating cross-region failover and high availability.
3
Identify private API access mechanism for on-premises workloads
Enable Private Google Access for on-premises hosts (using private.googleapis.com or restricted.googleapis.com VIPs).
This allows on-premises broadcast servers to reach Cloud Storage buckets privately over the Interconnect connections rather than over the public internet.

Key Concept

99.99% Availability Architecture for GCP Dedicated Interconnect with Global Dynamic Routing
Rate this question

Topics

Designing Network Architecture and Hybrid Connectivity