Examkin

Soru

Zorluk: OrtaHigh-Performing and Scalable Network Architectures

A company hosts a latency-sensitive application across two AWS Regions: us-east-1 and us-west-2. The company needs to route global user traffic to the Region that offers the lowest latency, with automatic failover if a Region becomes unhealthy. Additionally, the company must establish a secure hybrid network connection to replicate database backups from their on-premises data center to both AWS Regions. The replication traffic requires a consistent bandwidth of 2.52.5 Gbps. Which architecture should a solutions architect recommend to meet these requirements?

  1. Deploy AWS Global Accelerator to route user traffic to the application endpoints in both Regions. Establish an AWS Site-to-Site VPN connection to an AWS Transit Gateway, enabling Equal-Cost Multi-Path (ECMP) routing across multiple VPN tunnels to handle the database replication traffic.Cevap
  2. B
    Deploy AWS Global Accelerator to route user traffic to the application endpoints in both Regions. Establish a single AWS Site-to-Site VPN connection directly to a Virtual Private Gateway in each Region to handle the database replication traffic, relying on the VPN tunnel to dynamically scale up to the required throughput.
  3. C
    Configure Amazon Route 53 with a latency routing policy to direct user traffic to the Application Load Balancers (ALBs) in both Regions without active health checks. Establish an AWS Site-to-Site VPN connection to an AWS Transit Gateway, enabling Equal-Cost Multi-Path (ECMP) routing across multiple VPN tunnels to handle the database replication traffic.
  4. D
    Deploy AWS Global Accelerator to route user traffic to the application endpoints in both Regions. Establish an AWS Site-to-Site VPN connection to an AWS Transit Gateway with ECMP enabled. To secure the database replication, configure stateless Network ACLs on the database subnets to allow inbound traffic on the replication port, without adding corresponding outbound rules.

Cevap

Deploy AWS Global Accelerator to route user traffic to the application endpoints in both Regions. Establish an AWS Site-to-Site VPN connection to an AWS Transit Gateway, enabling Equal-Cost Multi-Path (ECMP) routing across multiple VPN tunnels to handle the database replication traffic.
The correct architecture uses AWS Global Accelerator to route user traffic using the low-latency AWS global network and automatically redirects traffic around unhealthy endpoints. For the hybrid database replication, because a single AWS Site-to-Site VPN tunnel is limited to 1.251.25 Gbps, configuring multiple VPN tunnels with ECMP enabled on an AWS Transit Gateway allows the connection to scale to 2.52.5 Gbps.

Adım Adım Çözüm

1
Address the user latency and failover requirements.
Using AWS Global Accelerator directs users to the nearest application endpoint using the AWS edge network and provides automatic health-check-based failover.
Global Accelerator uses Anycast IP addresses and the AWS global backbone network to minimize latency and automatically route around unhealthy endpoints.
2
Address the hybrid database replication throughput requirement.
Establish a Site-to-Site VPN with multiple tunnels attached to an AWS Transit Gateway, enabling Equal-Cost Multi-Path (ECMP) routing.
Since a single AWS VPN tunnel has a hard limit of 1.251.25 Gbps, ECMP routing across multiple active tunnels is required to aggregate bandwidth and support the 2.52.5 Gbps throughput requirement.

Anahtar Kavram

AWS Transit Gateway ECMP routing scales VPN bandwidth beyond the 1.251.25 Gbps tunnel limit, and AWS Global Accelerator optimizes user latency with automatic failover.
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

High-Performing and Scalable Network Architectures

Bu konudan daha fazla soru