What's changed: Created Professional Cloud Network Engineer Chapter 4 (Domain 4 "Hybrid/multicloud": Dedicated/Partner/Cross-Cloud Interconnect and VLAN attachments/L2-L3, HA VPN over Interconnect, 99.9%/99.99% SLA, MACsec, site-to-site IPSec VPN = HA VPN (on-prem/other VPC)/Classic VPN (route/policy-based), Cloud Router BGP attributes (ASN/MED/link-local/auth)/BFD/custom-advertised-learned routes/legacy-standard best-path selection, Network Connectivity Center hybrid spokes/site-to-site data transfer/router appliances/transitivity).
4.1Cloud Interconnect and IPSec VPN
Understand Dedicated/Partner/Cross-Cloud Interconnect connections and VLAN attachments, layer-2 vs layer-3 differences, HA VPN over Cloud Interconnect, 99.9%/99.99% SLA topologies, site-to-site IPSec VPN (HA VPN to on-prem/to other VPCs, Classic VPN route-based/policy-based), and encryption options such as MACsec.
Implement physical/logical connectivity to on-prem and other clouds. Choose the connection type by bandwidth, SLA, encryption, and destination, and meet the SLA with redundancy.
4.1.1Cloud Interconnect and VLAN attachments
For dedicated links, choose Dedicated Interconnect (your own colocation link to Google), Partner Interconnect (via a service provider), or Cross-Cloud Interconnect (dedicated link to another cloud). Attach to a VPC by creating a VLAN attachment. Partner differs by layer 2 (you run BGP) vs layer 3 (the provider manages BGP). If encryption is needed, use HA VPN over Cloud Interconnect or link-layer MACsec. For availability, build redundant topologies meeting 99.9% or 99.99% SLA (multiple locations/edge availability domains). Map "high-bandwidth dedicated via own colocation = Dedicated" and "flexible bandwidth via a provider = Partner."
Continue reading — free sign-up
You're reading the free preview. Sign up free to read this section in full, plus every chapter (including 4+) and all questions.