Your company has an application running on multiple Compute Engine instances.
You need to ensure that the application can communicate with an on-premises service that requires high throughput via internal IPs, while minimizing latency.
What should you do?
Click on the arrows to vote for the correct answer
A. B. C. D.C.
Reference - https://cloud.google.com/architecture/setting-up-private-access-to-cloud-apis-through-vpn-tunnels.
In order to allow communication between a Google Cloud application and an on-premises service, there are a few options available. However, to minimize latency and ensure high throughput via internal IPs, the best options are to use either direct peering or a dedicated interconnect connection.
A. Open VPN is a valid option for creating a VPN tunnel between the on-premises environment and Google Cloud. However, it is not the best option for high throughput and low latency, as it adds additional overhead and potential performance issues.
B. Direct peering allows for a private, low-latency connection between Google Cloud and an on-premises environment. With direct peering, traffic is routed directly through a dedicated connection rather than through the public internet. This option is suitable for high throughput and low latency, making it the best option for the scenario described.
C. Cloud VPN is another valid option for creating a VPN tunnel between Google Cloud and an on-premises environment. However, like Open VPN, it adds additional overhead and potential performance issues, making it less suitable for high throughput and low latency.
D. Cloud Dedicated Interconnect provides a dedicated, high-speed connection between Google Cloud and an on-premises environment. This option is suitable for high throughput and low latency, but it may be more expensive than direct peering and is generally used for higher-volume traffic scenarios.
In summary, the best option for ensuring high throughput and minimizing latency when communicating between a Google Cloud application and an on-premises service is to configure a direct peering connection.