Question

A retail company runs an SD-WAN overlay connecting 40 physical stores. Each store already has an SD-WAN edge appliance. The networking team wants to bring this SD-WAN fabric into Google Cloud so that store traffic can reach workloads in a central VPC, and they want to deploy virtual SD-WAN appliances inside the VPC that peer with the on-prem edges using BGP. They need a Google-managed hub that dynamically exchanges routes between these virtual appliances and the VPC without building point-to-point VPN tunnels for every store. Which design should they use?

Accepted Answer

Deploy the virtual SD-WAN instances as Router appliance spokes attached to a Network Connectivity Center hub, and establish BGP sessions between the appliances and Cloud Router.

Answer

Create HA VPN gateways in the VPC and configure one pair of tunnels per store directly to each SD-WAN edge appliance.

Answer

Use VPC Network Peering between the central VPC and a transit VPC that hosts the virtual SD-WAN appliances so routes propagate automatically.

Answer

Attach the central VPC as a VPC spoke to a Network Connectivity Center hub and rely on Private Service Connect to reach the on-prem edges.