An enterprise SaaS provider is setting up hybrid connectivity between its primary on-premises management center and a Google Cloud VPC network. To meet internal reliability mandates, the connection must achieve a 99.99% availability SLA using IPsec encryption and dynamic routing. Which TWO configuration steps must be implemented on Google Cloud to fulfill these HA Cloud VPN requirements?
- Provision an HA Cloud VPN gateway in the VPC, which automatically generates two external IP addresses assigned across distinct interfaces.Answer
- Establish two VPN Tunnels from the HA Cloud VPN gateway interfaces and configure active BGP sessions on a Cloud Router for each tunnel.Answer
- CRely on VPC Network Peering to transit VPN traffic from the connected VPC into adjacent partner VPCs without establishing direct tunnels to each VPC.
- DDeploy a single Classic VPN gateway using static routing to achieve dedicated throughput exceeding 10 Gbps per tunnel connection.
- EConfigure VPC Service Controls to prevent IPsec tunnel traffic from establishing external Cloud Router BGP peerings.
Answer
To achieve a 99.99% SLA with HA Cloud VPN, you must provision an HA Cloud VPN gateway (which automatically creates two interfaces with unique public IP addresses) and configure two VPN tunnels associated with active BGP sessions on a Cloud Router.
Achieving a 99.99% availability SLA for HA Cloud VPN requires deploying an HA Cloud VPN gateway—which allocates two separate public IP addresses across Interface 0 and Interface 1—and configuring two active IPsec VPN Tunnels paired with dynamic BGP routing on a Cloud Router. This dual-interface, dual-tunnel setup guarantees full redundancy across Google Cloud infrastructure.
Step-by-Step Solution
Key Concept
HA Cloud VPN High Availability Requirements (99.99% SLA)