Question

A company runs a Site-to-Site VPN between its on-premises data center in Asia and a VPC in the eu-west-1 Region. Users complain about inconsistent latency and occasional packet loss over the public internet path traversing multiple ISPs. The network team wants to improve and stabilize the performance of the VPN tunnels without deploying Direct Connect. Which implementation approach best meets this requirement?

Accepted Answer

Enable an accelerated Site-to-Site VPN connection so tunnel traffic enters the AWS global network at the nearest edge location via AWS Global Accelerator.

Answer

Increase the number of VPN tunnels and enable ECMP on the Transit Gateway to spread traffic across more internet paths.

Answer

Attach an AWS Global Accelerator standard accelerator directly to the virtual private gateway to route VPN traffic over the AWS backbone.

Answer

Reconfigure the customer gateway to use IKEv2 with larger DPD timers to reduce tunnel renegotiation during high latency.