A financial enterprise is expanding its cloud presence by establishing private, low-latency network connectivity between its on-premises data center and resources deployed across two Google Cloud regions (`us-east4` and `europe-west3`) within a single Custom Mode Virtual Private Cloud (VPC) network. The on-premises connection requires a guaranteed bandwidth of 10 Gbps, and resources in both regions must dynamically exchange routes with on-premises routers without creating separate regional peering loops. Which TWO architectural actions should be implemented to fulfill these requirements?
- Configure the VPC network dynamic routing mode to Global so Cloud Routers can advertise and receive dynamic routes across all regions.Cevap
- Provision Dedicated Interconnect circuits between the on-premises facility and Google Cloud colocation facilities.Cevap
- CDeploy an HA VPN gateway with multiple IPsec tunnels over the public internet to deliver the required 10 Gbps bandwidth and latency SLA.
- DEstablish VPC Network Peering between regional subnets and rely on transit routing through a central spoke to connect regions to on-premises.
- EDeploy GKE clusters in private mode without setting control plane authorized networks, relying entirely on default firewall rules to block public master endpoints.
Cevap
To meet high-bandwidth requirements and multi-region dynamic routing, configure Global Dynamic Routing on the VPC network and provision Dedicated Interconnect circuits.
Configuring Global Dynamic Routing on the VPC allows BGP dynamic routes learned by a Cloud Router in one region to be distributed to resources in all other regions automatically. Pairing this with Dedicated Interconnect satisfies the strict 10 Gbps bandwidth and low-latency SLA requirements for hybrid connectivity.
Adım Adım Çözüm
Anahtar Kavram
Global Dynamic Routing and Dedicated Interconnect Configuration