Soru

Zorluk: ZorConfiguring Hybrid Connectivity and VPN Interconnects

An online streaming platform uses a 10 Gbps Partner Interconnect connection as its primary link between an on-premises data center and a Google Cloud VPC, with an HA VPN connection configured as a secondary backup link. Both hybrid connections terminate on the same Cloud Router in the us-east1 region using dynamic BGP routing. During high-traffic events, network operations notices that egress traffic from the VPC to the on-premises network is being distributed equally across both paths, causing high latency and packet reordering over the lower-speed VPN link. How should the network architect adjust the Cloud Router BGP configuration to ensure that egress traffic from Google Cloud strictly prefers the Partner Interconnect connection under normal operating conditions?

  1. Set a lower base advertised route priority value on the Partner Interconnect BGP session relative to the HA VPN BGP session.Cevap
  2. B
    Replace the HA VPN gateway with a Dedicated Interconnect connection because Cloud Router does not support dynamic BGP metric prioritization over VPN tunnels.
  3. C
    Configure VPC Network Peering between the Cloud Router interfaces to establish a transitive path preference for the interconnect attachment.
  4. D
    Deploy VPC Service Controls around the Cloud Router BGP endpoints to block egress data from traversing public internet paths.

Cevap

Assigning a lower base advertised route priority (which corresponds to a lower BGP MED value) to the Partner Interconnect BGP session compared to the HA VPN BGP session on the Cloud Router ensures Google Cloud prefers the Partner Interconnect route for outbound traffic.
Google Cloud Router uses the base advertised route priority to advertise MED values for BGP routes. BGP routing decision logic prefers routes with lower MED values. Setting a lower priority value on the Partner Interconnect BGP session relative to the HA VPN BGP session instructs Google Cloud to prioritize the Partner Interconnect path for egress traffic back to the on-premises network.

Adım Adım Çözüm

1
Analyze the routing behavior
Equal cost multi-path (ECMP) routing occurs when BGP routes learned or advertised across redundant paths carry identical MED/priority values.
Traffic is being distributed across both high-speed Partner Interconnect and lower-speed HA VPN links because Cloud Router views them as equal priority paths.
2
Identify GCP Cloud Router BGP priority mechanisms
Cloud Router utilizes the 'base advertised route priority' setting to advertise MED values to peer routers and select outbound routes.
In BGP routing policy, lower MED numerical values represent higher route preference.
3
Apply the optimal configuration change
Configure a lower base advertised priority (e.g., 100) on the Partner Interconnect BGP session and a higher priority (e.g., 200) on the HA VPN BGP session.
This guarantees that egress traffic from the VPC defaults to the Partner Interconnect link and only spills over or fails over to HA VPN if the primary link drops.

Anahtar Kavram

Cloud Router BGP Route Prioritization and MED
Bu soruyu puanla