An enterprise organization needs to establish hybrid network connectivity between its on-premises environment and a Google Cloud Virtual Private Cloud (VPC). The business mandates a strict 99.99% service level availability (SLA) for the VPN connection to support mission-critical workloads. Which architecture should the cloud architect deploy to meet Google Cloud's requirements for a 99.99% availability SLA?
- Deploy an HA Cloud VPN gateway with two interfaces, configure two active VPN tunnels connected to two separate on-premises peer VPN gateway devices, and establish two BGP sessions on a Cloud Router using dynamic routing.Answer
- BDeploy two Classic VPN gateways in different GCP regions, configure static routing rules on each, and use policy-based traffic selectors to handle failover across regions.
- CDeploy a single HA Cloud VPN gateway with one tunnel connected to on-premises, and pair it with VPC Network Peering to transit on-premises traffic across multiple peered VPCs.
- DDeploy an HA Cloud VPN gateway with four active tunnels and configure static equal-cost multi-path (ECMP) routes on the VPC subnet without deploying Cloud Router.
Answer
Deploying an HA Cloud VPN gateway with two interfaces, configuring two active tunnels pointing to separate on-premises peer devices, and running dynamic BGP sessions via Cloud Router satisfies the GCP 99.99% SLA requirement.
Google Cloud guarantees a 99.99% availability SLA for HA Cloud VPN when configured with complete redundancy. This requires an HA Cloud VPN gateway with two interfaces, two tunnels established to two separate on-premises peer gateways (or one peer gateway with two distinct public IPs), and dynamic BGP routing managed by Cloud Router across both tunnels.
Step-by-Step Solution
Key Concept
HA Cloud VPN 99.99% Topology Requirements