An enterprise is migrating a large-scale data analytics platform to AWS. The platform requ… — AWS Certified Solutions Architect - Associate

An enterprise is migrating a large-scale data analytics platform to AWS. The platform requires a hybrid network connection to synchronize transactional logs from an on-premises mainframe to multiple Amazon VPCs in the same Region. The synchronization process requires a minimum bandwidth of $3\text{ Gbps}$ and must be encrypted in transit. Due to tight project timelines, the solution must be deployed within a few days, ruling out the provisioning of a new AWS Direct Connect connection. Which network architecture will meet these requirements with the highest performance and scalability?

Deploy an AWS Transit Gateway and attach the target VPCs. Establish an AWS Site-to-Site VPN connection to the Transit Gateway, enabling Equal-Cost Multi-Path (ECMP) routing on both the Transit Gateway and the customer gateway. Configure at least three active VPN tunnels to aggregate the required throughput.Cevap
B
Deploy an AWS Site-to-Site VPN connection terminating at a Virtual Private Gateway (VGW) attached to the main VPC. Configure the customer gateway to use both VPN tunnels in an active-active configuration to dynamically scale the aggregate throughput to $3\text{ Gbps}$ .
C
Deploy a single AWS Site-to-Site VPN connection terminating at a Virtual Private Gateway (VGW). To achieve the $3\text{ Gbps}$ throughput requirement, modify the subnet Network ACLs to be stateless to bypass the connection-tracking limits and overhead of stateful Security Groups.
D
Deploy multiple AWS Site-to-Site VPN connections terminating at different Virtual Private Gateways. Configure Amazon Route 53 with latency-based routing policies to distribute the data replication traffic across the VPN endpoints to achieve an aggregate throughput of $3\text{ Gbps}$ .

Cevap

Deploy an AWS Transit Gateway and attach the target VPCs. Establish an AWS Site-to-Site VPN connection to the Transit Gateway, enabling Equal-Cost Multi-Path (ECMP) routing on both the Transit Gateway and the customer gateway. Configure at least three active VPN tunnels to aggregate the required throughput.

The correct architecture uses AWS Transit Gateway with ECMP enabled. Each Site-to-Site VPN tunnel supports up to

1.25\text{ Gbps}

of throughput. By terminating the VPN connection on a Transit Gateway, you can enable ECMP to aggregate throughput across multiple active tunnels, allowing the application to reach the target

3\text{ Gbps}

bandwidth within the required timeline.

Adım Adım Çözüm

Identify the throughput requirement and connection constraints.

The target throughput is

3\text{ Gbps}

, which must be encrypted and deployed quickly without Direct Connect.

This rules out a standard single VPN tunnel since it is limited to

1.25\text{ Gbps}

, and rules out Direct Connect due to deployment time constraints.

Select a technology capable of aggregating VPN throughput.

AWS Transit Gateway supports Equal-Cost Multi-Path (ECMP) routing over VPN attachments.

ECMP allows the aggregation of multiple VPN tunnels to scale the total bandwidth beyond the

1.25\text{ Gbps}

limit of a single tunnel.

Calculate the number of tunnels required.

At least three VPN tunnels (

3 \times 1.25\text{ Gbps} = 3.75\text{ Gbps}

capacity) are needed to safely exceed the

3\text{ Gbps}

requirement.

This guarantees that the combined capacity of the ECMP-routed tunnels satisfies the required target throughput.

Anahtar Kavram

AWS Transit Gateway VPN ECMP throughput aggregation

Soru

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Konular

Bu konudan daha fazla soru