Examkin

Soru

Zorluk: Çok zorDesigning Network Architecture and Hybrid Connectivity

A global retail supply-chain enterprise is designing its hybrid connectivity architecture to connect diverse operational sites to Google Cloud. Match each business unit's network and SLA requirement to the optimal Google Cloud hybrid networking solution.

  • Primary regional distribution hubs requiring a 99.99% SLA, non-encrypted dedicated physical throughput exceeding 10 Gbps, and direct private connectivity to GCP without using public internet infrastructure.Dual Dedicated Interconnect circuits deployed across two distinct metro colocation facilities with redundant Cloud Routers running BGP.
  • Remote fulfillment micro-warehouses requiring low-cost IPsec encrypted connectivity under 1 Gbps across public broadband ISP links, featuring SLA-backed automatic failover.HA VPN gateways configured with active-active IPsec tunnels and Cloud Router dynamic BGP routing.
  • Third-party vendor networks requiring private access to internal microservices hosted in GCP without permitting network-level IP range overlap or bidirectional VPC peering access.Private Service Connect endpoints targeting Producer Internal HTTP(S) Load Balancers.
  • Legacy data centers located where Google Cloud Interconnect colocation facilities are absent, requiring sub-10 Gbps private connectivity provisioned through a supported network service provider.Partner Interconnect with redundant VLAN attachments configured through a service provider partner.

Cevap

The primary distribution hubs match Dual Dedicated Interconnect across distinct metro facilities; remote micro-warehouses match HA VPN with dynamic BGP routing; third-party vendor networks match Private Service Connect; legacy data centers without colocation match Partner Interconnect through a service provider.
Each requirement aligns precisely with official GCP hybrid connectivity design guidelines: Dedicated Interconnect provides physical high-capacity links; HA VPN provides cost-effective encrypted tunnels over public IP; Private Service Connect delivers unidirectional service-level access without VPC peering or subnet overlap; and Partner Interconnect connects sites via service provider networks where direct Google colocation does not exist.

Adım Adım Çözüm

1
Analyze high-bandwidth and SLA requirements for primary regional distribution hubs.
Requirements exceed 10 Gbps with 99.99% SLA, ruling out Cloud VPN. Dedicated Interconnect across two distinct metro facilities is required for 99.99% availability.
Dedicated Interconnect offers physical 10 Gbps/100 Gbps links directly to Google edge facilities, achieving 99.99% SLA only when dual-hosted in separate metros.
2
Evaluate encrypted broadband connectivity for low-bandwidth remote fulfillment sites.
HA VPN with active-active tunnels and Cloud Router dynamic BGP routing is chosen.
HA VPN provides 99.99% SLA over public internet connections with native IPsec encryption suitable for low-throughput remote locations.
3
Identify isolated service exposure mechanism for third-party networks with potential overlapping CIDRs.
Private Service Connect (PSC) is selected.
PSC exposes specific internal load balancers using NAT endpoint IPs in consumer VPCs without peering entire networks or causing IP address collision.
4
Determine private connection method for facilities lacking direct Google edge colocation presence.
Partner Interconnect with service provider VLAN attachments is chosen.
Partner Interconnect bridges facilities to GCP via supported carrier networks when direct physical colocation with Google is unavailable.

Anahtar Kavram

Selecting GCP Hybrid Connectivity Solutions Based on Bandwidth, Encryption, SLA, and Location Constraints
Bu soruyu puanla

Konular

Designing Network Architecture and Hybrid Connectivity