Soru

Zorluk: Çok zorCost-Effective Network Routing and Data Transfer Optimization

An enterprise runs an analytics application on Amazon EC2 instances in private subnets across two VPCs: VPC B and VPC C. The application queries a central database cluster hosted in a private subnet within VPC A. Every month, the application in VPC B transfers 100 TB100\text{ TB} of data from VPC A, and the application in VPC C transfers 50 TB50\text{ TB} of data from VPC A. Currently, all three VPCs are interconnected using an AWS Transit Gateway, which is also connected to an on-premises data center via an AWS Direct Connect Gateway. Which solution represents the most cost-effective network routing architecture to minimize data transfer costs while maintaining the existing Direct Connect hybrid connectivity?

  1. A
    Configure public IP addresses for the database instances in VPC A, and route all database queries from VPC B and VPC C through their respective NAT Gateways to the public IPs of VPC A.
  2. B
    Replace the Transit Gateway with a Transit VPC design using software VPN appliances in a central VPC, and establish Site-to-Site VPN connections from VPC A, VPC B, and VPC C to route all database query traffic.
  3. Establish VPC Peering connections between VPC A and VPC B, and between VPC A and VPC C. Update the route tables in all VPCs to direct the database query traffic over the VPC Peering connections, while continuing to route on-premises and low-volume inter-VPC traffic through the Transit Gateway.Cevap
  4. D
    Provision an AWS Managed NAT Gateway in VPC A and configure the database cluster to route all outbound responses to VPC B and VPC C via the NAT Gateway, while keeping Transit Gateway as the connection path.

Cevap

Establish VPC Peering connections between VPC A and VPC B, and between VPC A and VPC C. Update the route tables in all VPCs to direct the database query traffic over the VPC Peering connections, while continuing to route on-premises and low-volume inter-VPC traffic through the Transit Gateway.
The correct solution uses VPC Peering to route high-volume database query traffic (150 TB150\text{ TB} monthly) directly between VPCs. Since VPC Peering does not charge a data processing fee, this completely avoids the 0.02perGBTransitGatewaydataprocessingcharge,saving0.02 per GB Transit Gateway data processing charge, saving 150,000 \text{ GB} \times \0.02=$3,0000.02 = \$3,000 per month. Keeping the existing Transit Gateway configuration for on-premises connectivity (Direct Connect) and low-volume inter-VPC communication maintains the simplified routing architecture for hybrid traffic without needing full-mesh peering.

Adım Adım Çözüm

1
Identify the high-volume data path.
The database queries from VPC B and VPC C to VPC A account for 150 TB150\text{ TB} (150,000 GB150,000\text{ GB}) of data transfer monthly.
This is the primary target for cost optimization.
2
Calculate the current Transit Gateway processing fees.
Transit Gateway charges 0.02perGBfordataprocessing,resultinginamonthlycostof0.02 per GB for data processing, resulting in a monthly cost of 150,000 \times 0.02 = \3,0003,000.
Establishing a baseline cost shows the magnitude of the routing overhead.
3
Evaluate VPC Peering as a cost-optimization strategy.
VPC Peering has no hourly fee and no data processing fee. Data transfer is billed at standard inter-AZ rates ($0.01 per GB) only if it crosses AZs, which is also true for Transit Gateway.
Bypassing the Transit Gateway processing fee for this specific route eliminates the $3,000\$3,000 monthly overhead.
4
Evaluate hybrid connectivity and management overhead.
Retaining the existing Transit Gateway for low-volume traffic (VPC B to VPC C) and hybrid Direct Connect traffic avoids configuring complex full-mesh peering or redundant VPNs.
A hybrid design optimizes cost for the high-volume path while preserving routing efficiency for the remaining infrastructure.

Anahtar Kavram

Hybrid VPC routing cost optimization using VPC Peering for high-volume traffic paths combined with AWS Transit Gateway for low-volume and on-premises traffic.
Tahmini Süre:3m 0s
Bu soruyu puanla