Question

A company connects its on-premises data center to an AWS Transit Gateway using a single Site-to-Site VPN connection. Each VPN connection provides two tunnels, but they observe that aggregate throughput is capped near 1.25 Gbps even though their internet circuit supports 5 Gbps. They use BGP for dynamic routing on the customer gateway. What should the network engineer implement to increase the achievable throughput across the VPN to AWS?

Accepted Answer

Create multiple Site-to-Site VPN connections to the Transit Gateway and enable equal-cost multi-path (ECMP) routing so traffic is distributed across the tunnels

Answer

Increase the MTU on both VPN tunnels to 9001 bytes to enable jumbo frames across the IPsec tunnels

Answer

Enable acceleration on the existing VPN connection and configure both tunnels in an active/standby failover pair

Answer

Attach the VPN to a Virtual Private Gateway instead of a Transit Gateway to unlock higher per-tunnel bandwidth