Question

A financial services company is designing a Dedicated Interconnect connection between their on-premises data center and Google Cloud. A compliance requirement mandates that all traffic traversing the physical link between their edge router and Google's peering edge must be encrypted at Layer 2. The design must minimize latency overhead and avoid tunnel-based encryption. Which approach should the network engineer choose?

Accepted Answer

Enable MACsec for Cloud Interconnect on the Dedicated Interconnect connection

Answer

Deploy HA VPN tunnels over the Dedicated Interconnect using IPsec encryption

Answer

Configure Cloud Interconnect with private Google Access and rely on Google's default in-transit encryption

Answer

Use Partner Interconnect and request the connectivity provider to encrypt the VLAN attachment