A biomedical telemetry organization is establishing hybrid network connectivity between its on-premises data center and Google Cloud. The target Google Cloud environment consists of a central Hub VPC peered via VPC Network Peering to two isolated Spoke VPCs (Analytics VPC and Patient Records VPC). The on-premises network requires a secure, encrypted connection to Google Cloud carrying a steady 2 Gbps of telemetry data. Additionally, on-premises diagnostic workloads must communicate directly with services hosted inside both Spoke VPCs. Which TWO network architecture decisions must you implement to satisfy these technical and routing requirements? (Select TWO)
- Deploy an HA VPN gateway with dual active-active IPSec tunnels and Cloud Router dynamic BGP routing in the central Hub VPC.Cevap
- Establish dedicated HA VPN connections from the on-premises data center to each Spoke VPC individually.Cevap
- CEnable custom route exports on the Hub VPC peering configurations to transitively route on-premises BGP traffic to the Spoke VPCs.
- DDeploy a Classic VPN gateway with static routes, because dynamic BGP routing over Cloud Router limits encrypted tunnel bandwidth to below 1 Gbps.
Cevap
Deploy an HA VPN gateway with dual active-active IPSec tunnels and Cloud Router dynamic BGP routing in the central Hub VPC, and establish dedicated HA VPN connections from the on-premises data center to each Spoke VPC individually.
To satisfy a 2 Gbps encrypted connectivity requirement with high availability, establishing an HA VPN gateway with active-active IPSec tunnels and Cloud Router dynamic BGP routing in the Hub VPC is essential. Furthermore, because GCP VPC Network Peering is non-transitive, on-premises networks cannot reach peered Spoke VPCs through the Hub VPC; establishing direct HA VPN connections to each Spoke VPC ensures full connectivity.
Adım Adım Çözüm
Anahtar Kavram
VPC Peering Non-Transitivity and HA VPN Architecture