Soru

Zorluk: ZorDesigning Network Architecture and Hybrid Connectivity

A global autonomous transportation enterprise is designing a hybrid network architecture to connect diverse operational sites to Google Cloud. Match each hybrid connectivity requirement on the left with the most appropriate Google Cloud networking solution on the right.

  • A primary data center requiring a private, unencrypted link supporting 20 Gbps bandwidth and a 99.99% availability SLA using direct physical connections to Google edge facilities across two metropolitan locations.Dedicated Interconnect deployed with redundant 10 Gbps or 100 Gbps circuits across distinct edge availability domains and Cloud Routers
  • A regional telemetry center requiring up to 2 Gbps of encrypted, redundant connectivity over the public internet with dynamic routing provided by BGP.High Availability (HA) VPN deployed with dual active-active IPsec tunnels using Cloud Router for dynamic routing
  • A remote testing facility requiring SLA-backed 4 Gbps private connectivity where the enterprise does not co-locate in a Google Cloud Interconnect location and must rely on a third-party service provider.Partner Interconnect configured with redundant Layer 2 or Layer 3 VLAN attachments through a supported service provider
  • A global multi-branch topology requiring site-to-site WAN connectivity and site-to-cloud routing using Google's global network infrastructure as a transit hub.Network Connectivity Center (NCC) configured with hybrid connectivity spokes and VPC spokes

Cevap

The primary data center requirement (20 Gbps direct connection, 99.99% SLA) matches Dedicated Interconnect; the regional telemetry center requirement (2 Gbps encrypted link over public internet) matches HA VPN; the remote testing facility requirement (4 Gbps provider-managed private link) matches Partner Interconnect; and the multi-branch global WAN requirement matches Network Connectivity Center.
Matching high bandwidth (20 Gbps) and physical co-location to Dedicated Interconnect ensures 99.99% availability via redundant Cloud Routers across two metro areas. Matching encrypted 2 Gbps public internet traffic to HA VPN satisfies security and routing constraints. Partner Interconnect provides provider-managed sub-10 Gbps private links where direct co-location is unavailable. Network Connectivity Center enables site-to-site transit connectivity using Google Cloud's global backbone.

Adım Adım Çözüm

1
Analyze bandwidth, physical co-location, and SLA requirements for the 20 Gbps primary data center connection.
Since bandwidth exceeds 10 Gbps and physical connection at Google edge facilities is specified, Dedicated Interconnect with redundant circuits across two metros is required to achieve a 99.99% SLA.
Cloud VPN cannot meet 20 Gbps bandwidth demands natively, and Partner Interconnect is meant for environments where direct co-location is not present.
2
Evaluate the regional telemetry center requirement for encrypted transmission over the public internet at 2 Gbps.
HA VPN provides dual active-active IPsec tunnels delivering up to 3 Gbps per tunnel bandwidth with dynamic BGP routing.
Interconnect solutions do not encrypt traffic by default and operate over dedicated private connections rather than the public internet.
3
Assess the remote facility requirement for 4 Gbps private SLA-backed connectivity without direct co-location presence.
Partner Interconnect enables connection through a supported service provider at sub-10 Gbps capacities without requiring colocation in a Google facility.
Dedicated Interconnect requires direct facility co-location, whereas Cloud VPN operates over public internet rather than private provider links.
4
Evaluate the global multi-branch site-to-site routing requirement.
Network Connectivity Center (NCC) allows using Google's global backbone for site-to-site WAN transit between hybrid networks.
Standard VPC Peering is non-transitive and cannot act as a transit network for on-premises-to-on-premises traffic.

Anahtar Kavram

Selecting and architecting Google Cloud hybrid connectivity services based on SLA, bandwidth, encryption, co-location, and WAN transit topology.
Bu soruyu puanla