Soru

Zorluk: ZorConfiguring Hybrid Connectivity and VPN Interconnects

A financial enterprise is expanding its hybrid cloud architecture and requires a dedicated hybrid connection between its on-premises data center infrastructure and a Google Cloud Virtual Private Cloud (VPC) network. The network architecture must guarantee a 99.99% availability Service Level Agreement (SLA) for production database sync traffic, utilize dynamic routing over Border Gateway Protocol (BGP), and maintain full redundancy against single-location failures. Which TWO configuration steps must you implement to establish this hybrid topology in accordance with Google Cloud best practices?

  1. Provision four Dedicated Interconnect circuits distributed across two distinct Google Cloud locations (metropolitan areas) and two Edge Availability Domains (EADs) per location.Cevap
  2. Configure VLAN attachments on the interconnect circuits associated with Cloud Routers deployed across redundant regions within the VPC network.Cevap
  3. C
    Deploy two Dedicated Interconnect circuits in a single metropolitan location and supplement them with an HA VPN tunnel pair over the public internet to satisfy the 99.99% SLA cost-effectively.
  4. D
    Establish Dedicated Interconnect attachments in a single transit VPC and rely on VPC Network Peering to transit hybrid traffic to isolated spoke VPCs without adding interconnect attachments or custom route advertisements to the spokes.
  5. E
    Apply IAM primitive roles to the VLAN attachments as the sole security boundary to prevent unauthorized cross-project data exfiltration from on-premises endpoints.

Cevap

To achieve a 99.99% SLA for Dedicated Interconnect, the architecture requires four Dedicated Interconnect connections provisioned across two distinct metropolitan locations and two Edge Availability Domains (EADs) per location, combined with VLAN attachments linked to redundant Cloud Routers across separate GCP regions.
Google Cloud specifies that achieving a 99.99% availability SLA for Dedicated Interconnect requires deploying four physical circuits across two distinct metropolitan locations and two Edge Availability Domains (EADs) per location, attached to redundant Cloud Routers in two different GCP regions with dynamic BGP routing.

Adım Adım Çözüm

1
Determine the physical infrastructure requirements for a 99.99% SLA on Dedicated Interconnect.
GCP mandates 4 connections across 2 different metropolitan locations (or locations in different EADs) with redundant on-premises routers.
Single-location deployments only qualify for a 99.9% SLA or no SLA depending on topology.
2
Configure the logical routing layer using Cloud Routers and BGP.
Deploy VLAN attachments to Cloud Routers in two different GCP regions within the target VPC network.
Dynamic routing via BGP across multi-region Cloud Routers enables continuous failover and traffic engineering.

Anahtar Kavram

99.99% Availability Architecture for GCP Dedicated Interconnect
Tahmini Süre:2m 0s
Bu soruyu puanla