Examkin

Soru

Zorluk: Çok zorDesigning Network Architecture and Hybrid Connectivity

A multinational financial clearing corporation is migrating its mission-critical ledger infrastructure to Google Cloud. The architecture requires hybrid connectivity between two on-premises data centers (located in Chicago and Frankfurt) and two Google Cloud regions (us-central1 and europe-west3). The design must deliver a sustained throughput of 40 Gbps per data center, guarantee a 99.99% availability SLA, allow on-premises systems in Chicago to communicate with cloud resources in europe-west3 without traversing public Internet, and prevent routing bottlenecks across regional workloads. Which hybrid network architecture should the Principal Cloud Architect recommend?

  1. Provision Dedicated Interconnect connections with redundant 10 Gbps or 100 Gbps circuits in two separate metropolitan edge availability domains per region, deploy Cloud Routers configured with Global Dynamic Routing in a Shared VPC host project, and establish BGP sessions with on-premises routers.Cevap
  2. B
    Establish HA VPN gateways in each region paired with Cloud Routers in regional dynamic routing mode, utilizing Equal-Cost Multi-Path (ECMP) routing across 14 parallel VPN tunnels per region to aggregate 40 Gbps bandwidth and achieve the 99.99% SLA.
  3. C
    Deploy HA VPN gateways from on-premises data centers to a central Transit VPC in us-central1, and configure VPC Network Peering between the Transit VPC and spoke VPCs in europe-west3 to route on-premises traffic transitively through us-central1.
  4. D
    Provision single Partner Interconnect links in us-central1 and europe-west3, and configure a full-mesh VPC Network Peering topology across all regional VPCs to enable transitive cross-region on-premises routing.

Cevap

Provision Dedicated Interconnect connections with redundant 10 Gbps or 100 Gbps circuits in two separate metropolitan edge availability domains per region, deploy Cloud Routers configured with Global Dynamic Routing in a Shared VPC host project, and establish BGP sessions with on-premises routers.
To achieve a 99.99% availability SLA and support 40 Gbps bandwidth, Google Cloud requires Dedicated Interconnect configured with redundant connections across two different edge availability domains (metropolitan locations) in each region, with two VLAN attachments per region connected to Cloud Routers. Setting Cloud Router dynamic routing mode to Global ensures that routes learned from on-premises BGP routers in one region (e.g., Chicago) are propagated across the entire VPC network, allowing direct communication with workloads in other regions (e.g., europe-west3).

Adım Adım Çözüm

1
Evaluate bandwidth and SLA requirements against connectivity options.
Sustained 40 Gbps bandwidth and 99.99% SLA eliminate Cloud VPN (which caps around 3 Gbps per tunnel) and mandate Dedicated Interconnect with redundant interconnect attachments across two edge availability domains in each region.
Dedicated Interconnect provides enterprise-grade, dedicated physical connections capable of 10 Gbps or 100 Gbps per link, meeting both high throughput and 99.99% SLA mandates.
2
Analyze cross-region hybrid routing requirements.
Enabling Global Dynamic Routing on Cloud Router allows routes learned via BGP in one region (e.g., us-central1 attached to Chicago) to be advertised to and accessible from subnets in another region (e.g., europe-west3).
Regional dynamic routing limits route propagation to the local VPC region, whereas Global Dynamic Routing enables seamless global VPC-wide connectivity.
3
Validate topology against VPC routing constraints.
Avoid transit VPC designs utilizing VPC Network Peering because VPC Network Peering does not support transitive routing for hybrid interconnects or VPNs.
VPC Network Peering cannot forward traffic between an on-premises router and a third-party peered VPC network.

Anahtar Kavram

Designing 99.99% SLA Hybrid Architecture with Dedicated Interconnect and Global Dynamic Routing
Tahmini Süre:3m 0s
Bu soruyu puanla

Konular

Designing Network Architecture and Hybrid Connectivity