A global logistics enterprise is designing a hybrid network architecture to connect its on-premises inventory database with workloads in Google Cloud. The architecture requires a dedicated private connection supporting 10 Gbps of bandwidth for continuous synchronization with a central management VPC (`vpc-core`). Additionally, an isolated analytics VPC (`vpc-analytics`) requires connectivity to the on-premises database through `vpc-core`. Which TWO architectural design choices should the cloud architect recommend?
- Deploy Dedicated Interconnect between the on-premises data center and vpc-core to supply the required 10 Gbps hybrid throughput.Answer
- BDeploy HA VPN with multiple aggregated IPsec tunnels between the on-premises network and vpc-core to achieve the 10 Gbps target bandwidth.
- Deploy an HA VPN gateway pair between vpc-analytics and vpc-core using Cloud Router to enable routed connectivity between vpc-analytics and the on-premises network.Answer
- DEstablish VPC Network Peering between vpc-analytics and vpc-core so that traffic from vpc-analytics transits vpc-core to reach the on-premises network.
Answer
The architect should deploy Dedicated Interconnect between the on-premises facility and vpc-core to satisfy the 10 Gbps bandwidth requirement, and establish HA VPN between vpc-analytics and vpc-core to enable transit routing to on-premises.
Dedicated Interconnect is the standard Google Cloud solution for private, high-capacity hybrid connectivity exceeding 3 Gbps, directly satisfying the 10 Gbps requirement. Furthermore, because VPC Peering is non-transitive, connecting vpc-analytics to vpc-core using HA VPN gateways and Cloud Router dynamic routing enables vpc-core to forward traffic securely to on-premises.
Step-by-Step Solution
Key Concept
Hybrid Network Bandwidth Selection and VPC Transitive Routing Boundaries