Increase Cloud VPN Bandwidth | PCNE Exam Question Answer | Google Certification

Increase Cloud VPN Bandwidth

Question

You are increasing your usage of Cloud VPN between on-premises and GCP, and you want to support more traffic than a single tunnel can handle.

You want to increase the available bandwidth using Cloud VPN.

What should you do?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

C.

Cloud VPN is a service that provides a secure and reliable connection between on-premises networks and Google Cloud Platform (GCP) virtual private clouds (VPCs). Cloud VPN uses IPsec, which is a widely used protocol for secure communication over the internet.

In order to increase the available bandwidth using Cloud VPN, there are different options available, such as increasing the MTU, adding more tunnels, or adding more VPN gateways. The best option depends on the specific requirements and limitations of the infrastructure.

A. Double the MTU on your on-premises VPN gateway from 1460 bytes to 2920 bytes. Increasing the MTU (Maximum Transmission Unit) size on the on-premises VPN gateway can increase the available bandwidth, as it allows for larger packets to be transmitted over the VPN. However, this option is limited by the MTU size of the internet connection between the on-premises network and the GCP VPC, which is typically 1500 bytes. If the MTU size is increased beyond this limit, packets will be fragmented, which can reduce the overall performance of the VPN.

B. Create two VPN tunnels on the same Cloud VPN gateway that point to the same destination VPN gateway IP address. Creating multiple tunnels on the same Cloud VPN gateway can increase the available bandwidth, as traffic can be load balanced across the tunnels. This option is recommended when there are multiple on-premises networks or VPN gateways that need to connect to the same GCP VPC.

C. Add a second on-premises VPN gateway with a different public IP address. Create a second tunnel on the existing Cloud VPN gateway that forwards the same IP range, but points at the new on-premises gateway IP. Adding a second on-premises VPN gateway with a different public IP address can increase the available bandwidth, as traffic can be load balanced across the two VPN gateways. This option is recommended when there are limitations in the internet connection or VPN gateway hardware that prevent a single VPN tunnel from providing sufficient bandwidth.

D. Add a second Cloud VPN gateway in a different region than the existing VPN gateway. Create a new tunnel on the second Cloud VPN gateway that forwards the same IP range, but points to the existing on-premises VPN gateway IP address. Adding a second Cloud VPN gateway in a different region can increase the available bandwidth, as traffic can be routed through the closest gateway based on the location of the on-premises network. This option is recommended when the on-premises network is geographically distributed and needs to connect to multiple GCP VPCs in different regions.

In summary, the best option to increase the available bandwidth using Cloud VPN depends on the specific requirements and limitations of the infrastructure. Options B, C, and D can all be valid solutions, depending on the specific scenario.