Question

Difficulty: HardConfiguring Hybrid Connectivity and VPN Interconnects

A global logistics enterprise needs to connect its primary on-premises data center to a Google Cloud environment containing resources across two regions: us-east1 and europe-west3. The connection requires a guaranteed bandwidth of 8 Gbps to support continuous telemetry processing and sub-50ms latency. The organization does not have a physical presence in a Google colocation facility and must rely on a third-party network service provider. Additionally, on-premises workloads must seamlessly reach resources in both Google Cloud regions over the private connection. Which hybrid connectivity architecture should you implement?

  1. Provision Partner Interconnect VLAN attachments through a supported service provider and enable Global Dynamic Routing on the VPC network.Answer
  2. B
    Establish an HA VPN gateway with three parallel IPsec VPN tunnels per region using Regional Dynamic Routing on the VPC network.
  3. C
    Order direct physical cross-connects for Dedicated Interconnect and configure VPC Network Peering between separate regional VPCs to transit hybrid BGP routes.
  4. D
    Deploy a VPC Service Controls perimeter bridge combined with Cloud NAT endpoints to route cross-region traffic over public IP space.

Answer

Provision Partner Interconnect VLAN attachments through a supported service provider and enable Global Dynamic Routing on the VPC network.
The correct approach provisions Partner Interconnect because the organization cannot colocate directly at a Google facility for Dedicated Interconnect and requires bandwidth (>3 Gbps) beyond standard HA VPN capabilities. Enabling Global Dynamic Routing on the VPC allows Cloud Routers connected to the Partner Interconnect VLAN attachments to dynamically learn and propagate routes across both us-east1 and europe-west3 regions.

Step-by-Step Solution

1
Evaluate bandwidth and physical facility constraints
Requirements specify 8 Gbps throughput and no direct colocation facility presence. Partner Interconnect is selected over Dedicated Interconnect (requires colocation) and HA VPN (capped at 3 Gbps per tunnel).
Partner Interconnect provides high-bandwidth private connectivity through partner service providers when direct colocation at a Google edge location is not possible.
2
Determine multi-region routing configuration within the VPC
Set VPC dynamic routing mode from Regional to Global.
Global Dynamic Routing allows Cloud Routers in us-east1 and europe-west3 to exchange BGP routes dynamically with the on-premises router and advertise VPC subnets in all regions.

Key Concept

Selecting and configuring high-throughput hybrid connectivity via Partner Interconnect with Global Dynamic Routing
Rate this question