Examkin

Soru

Zorluk: OrtaDesigning Network Architecture and Hybrid Connectivity

A healthcare organization is migrating clinical workloads and telemetry systems to Google Cloud. The infrastructure requires a tailored hybrid network topology that satisfies specific throughput, SLA, provider presence, and cross-VPC communication constraints. Match each GCP hybrid networking component to the architectural requirement it satisfies.

  • Dedicated Interconnect with MACsecDirect physical circuit at a colocation facility offering high-capacity unmetered link performance with link-layer encryption.
  • HA VPN with Cloud RouterIPSec encrypted connection across public internet guaranteeing 99.99% operational SLA via dynamic BGP routing.
  • Partner InterconnectPrivate connectivity to GCP for on-premises sites located where Google's co-location facility is unavailable, utilizing a service provider.
  • VPC Network PeeringLow-latency, zero-bandwidth-cost internal IP routing between two separate Google Cloud VPCs without transitivity across additional peering networks.

Cevap

Dedicated Interconnect with MACsec connects directly via physical circuits with Layer 2 encryption; HA VPN with Cloud Router provides 99.99% SLA encrypted connectivity using BGP over public internet; Partner Interconnect offers private connectivity through third-party service providers when direct colocation is impossible; VPC Network Peering securely bridges separate VPCs internally without network transitivity.
Each GCP networking product satisfies a distinct architectural need: Dedicated Interconnect provides direct physical links with MACsec hardware encryption; HA VPN delivers an SLA-backed 99.99% IPSec tunnel over public internet with BGP dynamic routing; Partner Interconnect offers private connectivity through service providers where Google colocation is absent; and VPC Network Peering provides direct, non-transitive internal IP connectivity between distinct VPCs.

Adım Adım Çözüm

1
Identify direct physical connection requirements with hardware-level encryption
Dedicated Interconnect with MACsec maps to direct physical circuits at a colocation facility offering link-layer encryption.
Dedicated Interconnect requires a physical cross-connect in a Google facility, and MACsec secures traffic between the on-premises router and Google edge router.
2
Identify high-availability internet-based encrypted connectivity requirements
HA VPN with Cloud Router maps to IPSec encrypted connections across public internet with 99.99% SLA via dynamic BGP routing.
HA VPN guarantees 99.99% availability when configured with two tunnels across properly redundant cloud routers using BGP.
3
Identify service provider-backed private connection requirements
Partner Interconnect maps to private connectivity via service providers for locations lacking direct Google colocation presence.
Partner Interconnect extends GCP private networks into data centers using a service provider's physical infrastructure.
4
Identify inter-VPC private communication requirements
VPC Network Peering maps to low-latency internal IP routing between separate GCP VPC networks with non-transitive boundaries.
VPC Network Peering directly links virtual networks within GCP, keeping traffic on Google's private network while enforcing non-transitive route isolation.

Anahtar Kavram

Selecting appropriate GCP hybrid connectivity and inter-VPC networking technologies based on physical presence, encryption, SLA, and routing constraints.
Bu soruyu puanla

Konular

Designing Network Architecture and Hybrid Connectivity