Soru

Zorluk: ZorDesigning Network Architecture and Hybrid Connectivity

A global supply chain enterprise is designing a hybrid cloud network architecture connecting its primary legacy data centers to Google Cloud. The design must satisfy two strict requirements:
1. The hybrid connection must sustain a continuous data ingestion rate of 12 Gbps12\text{ Gbps} with high reliability guaranteed by a 99.99%99.99\% Service Level Agreement (SLA).
2. Applications hosted in a Spoke VPC must communicate with a third-party vendor network that is peered to a central Hub VPC, without exposing traffic to the public internet or violating VPC routing constraints.

Which TWO network architecture decisions should the Lead Cloud Architect select to meet these requirements?

  1. Deploy Dedicated Interconnect circuits across two separate metropolitan edge availability domains (facilities) with Cloud Routers configured for global dynamic routing.Cevap
  2. Establish a direct VPC Network Peering connection between the Spoke VPC and the Vendor VPC.Cevap
  3. C
    Deploy multiple HA VPN gateways with Equal-Cost Multi-Path (ECMP) routing over dedicated internet links to achieve 12 Gbps throughput and a 99.99% SLA.
  4. D
    Configure custom route exports on the Hub-to-Spoke VPC Network Peering connection to allow transitive route propagation from the Vendor VPC.

Cevap

To meet both requirements, the architect must deploy Dedicated Interconnect circuits across two distinct metropolitan edge availability domains for 99.99% SLA and high bandwidth (12 Gbps12\text{ Gbps}), and establish a direct VPC Network Peering connection between the Spoke VPC and Vendor VPC because VPC Peering is non-transitive.
The solution requires Dedicated Interconnect deployed across two metropolitan edge domains to guarantee a 99.99% SLA for bandwidth over 10 Gbps, combined with direct VPC Network Peering between Spoke and Vendor VPCs due to the non-transitive nature of VPC Peering.

Adım Adım Çözüm

1
Analyze bandwidth and SLA requirements for hybrid connectivity.
Bandwidth is 12 Gbps12\text{ Gbps} (exceeding 10 Gbps10\text{ Gbps}) with a 99.99%99.99\% SLA requirement.
HA VPN maxes out around 3 Gbps3\text{ Gbps} per tunnel and is unsuited for unencrypted high-bandwidth requirements above 10 Gbps10\text{ Gbps}. Dedicated Interconnect with 4 connections across 2 metros is required for 99.99%99.99\% SLA.
2
Analyze routing requirements between Spoke VPC and Vendor VPC.
Traffic must travel between Spoke VPC and Vendor VPC through a Hub VPC.
VPC Network Peering is non-transitive in GCP. Network traffic from Vendor VPC cannot hop through Hub VPC to reach Spoke VPC. A direct VPC Peering connection between Spoke VPC and Vendor VPC is required.

Anahtar Kavram

99.99% SLA Dedicated Interconnect Topology and Non-Transitive VPC Network Peering Routing
Tahmini Süre:2m 0s
Bu soruyu puanla