Securing Connectivity for a 3-Tier Web Application on Google Cloud Platform

Connectivity Options for Collaborative Application Development

Question

A customer is collaborating with another company to build an application on Compute Engine.

The customer is building the application tier in their GCP Organization, and the other company is building the storage tier in a different GCP Organization.

This is a 3-tier web application.

Communication between portions of the application must not traverse the public internet by any means.

Which connectivity option should be implemented?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

B.

To ensure that communication between the application and storage tiers does not traverse the public internet, a private network connectivity option must be used. VPC peering, Cloud VPN, Cloud Interconnect, and Shared VPC are all options for private network connectivity within GCP.

VPC peering is a method of connecting two VPC networks in the same region. It allows instances within the connected VPC networks to communicate with each other using private IP addresses, but it does not allow communication between instances on the same network segment. In this scenario, since the two companies are using different GCP organizations, they are unlikely to be in the same VPC network.

Cloud VPN is a method of creating a secure tunnel over the public internet between a GCP network and an on-premises network or another cloud provider's network. However, in this scenario, the requirement is that communication between portions of the application must not traverse the public internet, so Cloud VPN is not a suitable option.

Cloud Interconnect provides dedicated, high-bandwidth connectivity between a customer's on-premises infrastructure and GCP. It can be used to establish a dedicated network connection between the two GCP organizations, ensuring that communication between the application and storage tiers is private and secure.

Shared VPC is a way to share a VPC network between different projects in the same GCP organization. Since the two companies are in different GCP organizations, they are unlikely to be able to use a shared VPC network.

Therefore, the most suitable option for this scenario is Cloud Interconnect.