Implementing Transit Gateway & Direct Connect Gateway for Highly Available VPC Communication
Question
An IT firm has created multiple VPCs as per project requirements which have customers' application servers deployed.
The firm is planning to deploy a Direct Connect Link from its multiple offshore locations which need to access servers from VPC for monitoring & troubleshooting purposes.
IT firm is looking for a highly available solution that can control traffic between VPC so that only specific subnets within those VPC can communicate with each other.
As an AWS consultant, you have suggested implementing Transit Gateway & AWS Direct Connect Gateway. Which of the below additional considerations should be followed while implementing the above suggestion sufficing client requirement?
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B. C. D.Correct Answer - A.
AWS Transit Gateway can be deployed to create full mesh or isolate VPC communication between VPC connecting to it as well as on-premises connectivity over AWS Direct Connect or VPN connections.
Also, route propagation should be enabled for BGP routes from offshore locations to communicate with servers in all VPC.Option B is incorrect as an additional Transit gateway is not required as Transit gateway is by design highly available.
Options C & D are incorrect as configuring a single subnet for Transit gateway VPC attachments is not recommended.
For more information on AWS Transit Gateway, refer to the following URL.
https://docs.aws.amazon.com/vpc/latest/tgw/tgw-best-design-practices.htmlThe IT firm wants to deploy a Direct Connect Link from its multiple offshore locations to access the servers in their VPCs for monitoring and troubleshooting purposes. They also require a highly available solution to control traffic between VPCs so that only specific subnets within those VPCs can communicate with each other. As an AWS consultant, you have suggested implementing Transit Gateway and AWS Direct Connect Gateway to meet the client's requirements.
Transit Gateway is a highly scalable and highly available service that simplifies VPC connectivity and allows the client to control the traffic flow between VPCs. It enables the client to connect their VPCs and on-premises networks to a single gateway, simplifying network management and reducing operational costs. AWS Direct Connect Gateway, on the other hand, is a service that allows the client to connect their Direct Connect connections to multiple VPCs in different regions within an AWS account.
To implement the suggested solution, there are additional considerations to be followed to meet the client's requirements. The correct answer is A. Create separate subnets for each Transit gateway VPC attachments and enable BGP route propagations for AWS Direct Connect gateway attachments.
Explanation:
A. Create separate subnets for each Transit gateway VPC attachments and enable BGP route propagations for AWS Direct Connect gateway attachments.
In this solution, each Transit Gateway attachment will have a separate subnet, and BGP route propagation will be enabled for the AWS Direct Connect Gateway attachments. This solution provides highly available VPC connectivity, as well as the ability to control traffic flow between VPCs using route tables. By using separate subnets, the client can easily manage traffic and apply security rules between different VPCs. BGP route propagation will ensure that the client can reach all the VPCs connected to the AWS Direct Connect Gateway.
B. Create separate subnets for each Transit gateway VPC attachments and create an additional Transit Gateway for high availability.
This solution is not necessary as Transit Gateway is already a highly available service that provides high availability by default. Creating additional Transit Gateways will only add additional complexity and costs.
C. Create a single subnet for each Transit gateway VPC attachments and enable BGP route propagations for AWS Direct Connect gateway attachments.
This solution is not recommended as having a single subnet for each Transit Gateway attachment can lead to potential traffic congestion and makes it difficult to manage traffic flow between VPCs.
D. Create a single subnet for each Transit gateway VPC attachments and create an additional Transit Gateway for high availability.
Similar to option B, creating additional Transit Gateways is not necessary as Transit Gateway is already highly available by default.
In summary, option A is the correct solution, which provides separate subnets for each Transit Gateway attachment and enables BGP route propagation for AWS Direct Connect Gateway attachments. This solution provides highly available VPC connectivity and the ability to control traffic flow between VPCs using route tables, while also providing flexibility in managing traffic and applying security rules between different VPCs.
