Question

A financial services company is migrating to Google Cloud and needs a dedicated, high-bandwidth (10 Gbps) connection between their on-premises data center and their VPC. A compliance requirement mandates that all traffic traversing the connection between on-premises and Google Cloud must be encrypted in transit. The company wants the lowest-latency dedicated option while still meeting the encryption requirement. Which approach should they implement?

Accepted Answer

Provision Dedicated Interconnect and run HA VPN over the Interconnect connection using MACsec or IPsec to encrypt traffic

Answer

Provision Dedicated Interconnect alone, since traffic over a private physical circuit is inherently encrypted by Google

Answer

Use HA VPN over the public internet, which provides IPsec encryption and comparable bandwidth to Dedicated Interconnect

Answer

Use Partner Interconnect with Private Google Access enabled to encrypt all traffic to Google APIs