A smart logistics enterprise is migrating its central warehouse management system to Google Cloud. The architecture team must establish a highly available, encrypted hybrid network connection between their on-premises data center and a GCP Virtual Private Cloud (VPC). The connection must support automated route exchange via dynamic routing and meet SLA requirements for high availability (99.99% availability). Which TWO configuration steps are required on Google Cloud to achieve this setup?
- Provision an High Availability (HA) Cloud VPN gateway in the target region with two active interfaces, creating two separate IPsec VPN tunnels to the on-premises VPN device.Cevap
- BConfigure VPC Network Peering between the on-premises router interface and the GCP VPC to route internal traffic directly without BGP.
- Deploy a Cloud Router in the target region and establish dynamic BGP sessions for both IPsec tunnels associated with the HA VPN gateway.Cevap
- DDeploy a Classic VPN gateway configured with policy-based static routes to handle failover between the on-premises site and GCP.
- EImplement a VPC Service Controls perimeter around the VPN gateway to manage dynamic BGP route propagation across hybrid environments.
Cevap
To establish a highly available dynamic hybrid network connection with a 99.99% SLA using Cloud VPN, you must provision an HA Cloud VPN gateway with two active interfaces terminating two separate IPsec tunnels, and deploy a Cloud Router in the target region to configure dynamic BGP sessions for both tunnels.
Google Cloud HA VPN requires an HA VPN gateway containing two interfaces (Interface 0 and Interface 1) with two separate IPsec VPN tunnels connected to the on-premises peer. In addition, HA VPN requires a Cloud Router located in the same region to manage dynamic BGP routing across the dual tunnels, satisfying the 99.99% SLA commitment.
Adım Adım Çözüm
Anahtar Kavram
HA Cloud VPN and Dynamic Routing with Cloud Router