Question

Your company runs production workloads in a single Google Cloud VPC and requires connectivity to two separate on-premises data centers, each with its own peer VPN gateway. Management requires the 99.99% availability SLA for the HA VPN connection to each data center. You are designing the HA VPN gateway configuration. How should you configure the HA VPN gateway and tunnels to meet the 99.99% SLA for connectivity to each data center?

Accepted Answer

Create one HA VPN gateway with two interfaces, and for each data center create two tunnels — one from each HA VPN gateway interface to a separate peer gateway interface — with BGP sessions on Cloud Router.

Answer

Create one HA VPN gateway with a single interface and one tunnel to each data center, relying on Cloud Router BGP for automatic failover.

Answer

Create two separate HA VPN gateways per data center, each with a single tunnel, and enable ECMP on Cloud Router to reach the peers.

Answer

Create one Classic VPN gateway with two tunnels to each data center and configure policy-based routing for redundancy.