Soru

Zorluk: ZorDesigning Network Architecture and Hybrid Connectivity

A multinational retail banking institution is architecting hybrid connectivity to migrate its core transaction processing platform from an on-premises data center to Google Cloud. The architecture requires a sustained throughput of 15 Gbps15\text{ Gbps} for real-time database synchronization between on-premises mainframes and compute instances hosted across two GCP regions. The compliance team mandates zero traversal over the public internet, and the business continuity team specifies a strict uptime Service Level Agreement (SLA) of 99.99%99.99\%. Which hybrid networking design satisfies these requirements?

  1. Provision dual 10 Gbps Dedicated Interconnect connections in one GCP interconnect location and dual 10 Gbps Dedicated Interconnect connections in a second GCP interconnect location, with Cloud Routers deployed in each region establishing BGP sessions over distinct VLAN attachments.Cevap
  2. B
    Establish five HA VPN gateways with two active-active IPSec tunnels per gateway, utilizing Cloud Router with dynamic BGP routing to aggregate bandwidth across all tunnels to meet the 15 Gbps threshold.
  3. C
    Configure VPC Network Peering between the central hybrid transit VPC and all application workload VPCs, relying on the central VPC's single Dedicated Interconnect attachment to transit traffic transparently from on-premises to spoke VPCs.
  4. D
    Deploy a single 20 Gbps Partner Interconnect connection through a service provider into a single GCP region, and configure Cloud VPN as a backup link to achieve the required 99.99% SLA.

Cevap

Deploy dual 10 Gbps Dedicated Interconnect connections in two distinct GCP interconnect locations with Cloud Routers in each target region.
Deploying dual 10 Gbps Dedicated Interconnect links across two distinct GCP interconnect locations with redundant Cloud Routers in each region fulfills the 15 Gbps bandwidth requirement, provides private connectivity off the public internet, and adheres strictly to Google's 99.99% SLA topology requirements.

Adım Adım Çözüm

1
Analyze bandwidth and security constraints.
The requirement calls for sustained 15 Gbps throughput without public internet traversal. HA VPN maxes out at 3 Gbps per tunnel and traverses public networks, ruling out VPN-only strategies.
Dedicated Interconnect provides private, direct physical links capable of 10 Gbps or 100 Gbps per circuit.
2
Evaluate high availability (SLA) requirements.
The requirement specifies a 99.99% SLA.
Google Cloud requires 4 VLAN attachments deployed across 2 separate interconnect locations (metropolitan regions) connected to 2 distinct on-premises routers to qualify for the 99.99% SLA.
3
Evaluate transitive routing mechanisms.
VPC Network Peering does not support transitive routing for hybrid interconnect traffic.
Traffic cannot hop from On-Premises -> Transit VPC -> Peered Spoke VPC via standard VPC Peering alone.

Anahtar Kavram

Designing High-Availability (99.99%) Dedicated Interconnect Architectures
Tahmini Süre:2m 0s
Bu soruyu puanla