An enterprise organization needs to establish hybrid network connectivity between its on-premises environment and a Google Cloud Virtual Private Cloud (VPC). The business mandates a strict 99.99% service level availability (SLA) for the VPN connection to support mission-critical workloads. Which architecture should the cloud architect deploy to meet Google Cloud's requirements for a 99.99% availability SLA?
- Deploy an HA Cloud VPN gateway with two interfaces, configure two active VPN tunnels connected to two separate on-premises peer VPN gateway devices, and establish two BGP sessions on a Cloud Router using dynamic routing.Cevap
- BDeploy two Classic VPN gateways in different GCP regions, configure static routing rules on each, and use policy-based traffic selectors to handle failover across regions.
- CDeploy a single HA Cloud VPN gateway with one tunnel connected to on-premises, and pair it with VPC Network Peering to transit on-premises traffic across multiple peered VPCs.
- DDeploy an HA Cloud VPN gateway with four active tunnels and configure static equal-cost multi-path (ECMP) routes on the VPC subnet without deploying Cloud Router.
Cevap
Deploying an HA Cloud VPN gateway with two interfaces, configuring two active tunnels pointing to separate on-premises peer devices, and running dynamic BGP sessions via Cloud Router satisfies the GCP 99.99% SLA requirement.
Google Cloud guarantees a 99.99% availability SLA for HA Cloud VPN when configured with complete redundancy. This requires an HA Cloud VPN gateway with two interfaces, two tunnels established to two separate on-premises peer gateways (or one peer gateway with two distinct public IPs), and dynamic BGP routing managed by Cloud Router across both tunnels.
Adım Adım Çözüm
Anahtar Kavram
HA Cloud VPN 99.99% Topology Requirements