A retail company is migrating its inventory management database from an on-premises data c… — AWS Certified Solutions Architect - Associate

A retail company is migrating its inventory management database from an on-premises data center to AWS. The database synchronization process requires a continuous, secure network throughput of at least $3\text{ Gbps}$ to handle peak transactional volumes. The company wants to minimize costs by using an internet-based connection rather than a dedicated leased line, while ensuring high availability. Which network architecture should a solutions architect design to meet these requirements?

A
Deploy a Virtual Private Gateway (VGW) attached to the VPC, and establish a single AWS Site-to-Site VPN connection. Configure the customer gateway to utilize dynamic routing with Border Gateway Protocol (BGP) in an active-active configuration to load balance traffic across both VPN tunnels to achieve a throughput of $2.5\text{ Gbps}$ .
Deploy an AWS Transit Gateway and establish two AWS Site-to-Site VPN connections terminating on it. Enable Equal-Cost Multi-Path (ECMP) routing on the Transit Gateway, and configure the on-premises customer gateway to advertise the same routes using Border Gateway Protocol (BGP) across the active VPN tunnels.Cevap
C
Deploy an AWS Transit Gateway and establish a single AWS Site-to-Site VPN connection. Enable Equal-Cost Multi-Path (ECMP) routing on the Transit Gateway, and configure stateless Network Access Control Lists (NACLs) at the subnet boundaries to allow inbound and outbound traffic on UDP ports $500$ and $4500$ to bypass the individual tunnel throughput limitations.
D
Deploy a Virtual Private Gateway (VGW) attached to the VPC, and establish two Site-to-Site VPN connections. Use Amazon Route 53 with a latency-based routing policy to distribute the database replication traffic across the four public IP addresses of the VPN tunnels to aggregate the throughput to $5\text{ Gbps}$ .

Cevap

Deploy an AWS Transit Gateway and establish two AWS Site-to-Site VPN connections terminating on it. Enable Equal-Cost Multi-Path (ECMP) routing on the Transit Gateway, and configure the on-premises customer gateway to advertise the same routes using Border Gateway Protocol (BGP) across the active VPN tunnels.

The correct option is to deploy an AWS Transit Gateway with two AWS Site-to-Site VPN connections and enable ECMP routing. Since a single VPN tunnel is limited to

1.25\text{ Gbps}

of throughput, and a single VPN connection contains two tunnels (maximum

2.5\text{ Gbps}

aggregated via ECMP), the company must establish at least two VPN connections (four tunnels) terminating on a Transit Gateway. Enabling ECMP allows AWS Transit Gateway to distribute traffic dynamically across all active tunnels, achieving an aggregate throughput of up to

5\text{ Gbps}

, which satisfies the

3\text{ Gbps}

requirement.

Adım Adım Çözüm

Analyze the bandwidth requirement of

3\text{ Gbps}

and the limitations of AWS VPN.

Identify that a single AWS Site-to-Site VPN tunnel has a hard throughput limit of

1.25\text{ Gbps}

To determine the number of tunnels required to support the

3\text{ Gbps}

demand.

Calculate the required number of VPN connections and tunnels.

Determine that at least 3 tunnels are needed (

3 \times 1.25\text{ Gbps} = 3.75\text{ Gbps}

). Since one VPN connection only provides 2 tunnels, at least two VPN connections (providing 4 tunnels, up to

5\text{ Gbps}

) are required.

A single VPN connection cannot exceed

2.5\text{ Gbps}

aggregate throughput even with ECMP.

Determine the routing and gateway architecture that supports bandwidth aggregation.

Select AWS Transit Gateway, which supports Equal-Cost Multi-Path (ECMP) routing over VPN attachments, unlike Virtual Private Gateways (VGW).

To allow the traffic to be actively load-balanced across multiple VPN tunnels using dynamic BGP routing.

Anahtar Kavram

AWS Site-to-Site VPN bandwidth scaling using AWS Transit Gateway and Equal-Cost Multi-Path (ECMP) routing.

Soru

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Konular

Bu konudan daha fazla soru