Question

A retail company has two on-premises data centers connected to Google Cloud via HA VPN. They also operate three separate VPC networks (prod, staging, and shared-services) that today have no connectivity to each other or to the data centers. Management wants a single managed hub that allows the on-premises sites to reach all three VPCs and allows the VPCs to exchange data-transfer traffic with each other, without building a full mesh of VPN tunnels or peering connections, and while retaining centralized route management. Which design should the network engineer implement?

Accepted Answer

Create a Network Connectivity Center hub and attach the three VPCs as VPC spokes and the HA VPN tunnels as hybrid (VPN) spokes.

Answer

Establish VPC Network Peering between each pair of VPCs and rely on the peering to transit the HA VPN routes to all VPCs.

Answer

Migrate all three VPCs into a single Shared VPC host project and connect the data centers with HA VPN to that host project.

Answer

Deploy a self-managed router VM in a transit VPC and use custom static routes to forward traffic between the VPCs and the VPN tunnels.