Question

A retail company is building a single HA VPN gateway in the us-central1 region to connect its on-premises data center to a Google Cloud VPC. The network team wants to achieve the 99.99% availability SLA for the Cloud VPN connection. The on-premises side has two physical routers, each with a public IP. How should the team configure the HA VPN gateway and tunnels to meet this SLA requirement?

Accepted Answer

Create one HA VPN gateway (two interfaces) and configure two tunnels, one from each gateway interface to each of the two on-premises peer devices, using BGP on Cloud Router for dynamic failover.

Answer

Create two separate HA VPN gateways in the same region, each with a single tunnel to one on-premises router, and rely on static routes for failover.

Answer

Create one HA VPN gateway with a single interface and a single tunnel to one on-premises router, then enable Cloud Router graceful restart to guarantee the SLA.

Answer

Create one Classic VPN gateway with two tunnels to the two on-premises routers and configure route-based routing with equal-cost multipath.