Soru

Zorluk: KolayHigh-Performing and Scalable Network Architectures

A company has two VPCs in the same AWS Region that need to share database replication traffic. The database replication requires high throughput and the lowest possible latency between the VPCs. Which network connectivity option should a solutions architect recommend to meet these performance requirements?

  1. A
    Set up an AWS Site-to-Site VPN connection between the VPCs to tunnel the database replication traffic.
  2. B
    Configure Amazon Route 53 with a latency-based routing policy to route the traffic over the public internet.
  3. Establish a VPC peering connection between the VPCs and update the VPC route tables to direct traffic.Cevap
  4. D
    Configure stateful Network Access Control Lists (NACLs) to bypass the VPC routing table and establish a direct connection.

Cevap

Establish a VPC peering connection between the VPCs and update the VPC route tables to direct traffic.
The correct option is to establish a VPC peering connection. VPC peering allows direct routing of traffic between VPCs in the same Region using private IP addresses. Because it does not rely on physical gateways or VPN tunnels, it has no bandwidth bottlenecks, provides the lowest latency, and does not incur encryption overhead.

Adım Adım Çözüm

1
Analyze the requirements for network connectivity between two VPCs in the same AWS Region.
The requirements demand high throughput and the lowest possible latency for database replication.
This helps narrow down the solutions to options that utilize the AWS internal network backbone without translation gateways or public internet transit.
2
Evaluate VPC peering against other options.
VPC peering connects the VPCs directly, allowing instances to communicate using private IP addresses at full network speed with no intermediate gateways.
This provides the lowest possible latency and supports high bandwidth.
3
Assess the performance limitations of alternative solutions.
A Site-to-Site VPN is limited to 1.25 Gbps1.25\text{ Gbps} per tunnel; Route 53 latency routing over the public internet increases latency; Network ACLs are security filters, not routing mechanisms.
This eliminates suboptimal or technically incorrect options.

Anahtar Kavram

VPC Peering for High-Performance Inter-VPC Connectivity
Bu soruyu puanla