QuestionQ177
Network DesignA company is migrating its containerized application to AWS. Its architecture will include an ingress VPC with a Network Load Balancer (NLB) that distributes traffic to front-end pods in an Amazon Elastic Kubernetes Service (Amazon EKS) cluster. The application's front end will identify which user is requesting access and will route traffic to 1 of 10 services VPCs. Each services VPC will contain an NLB that distributes traffic to the service pods in an EKS cluster.
The company is concerned about overall cost. User traffic will account for more than 10 TB of data transfer from the ingress VPC to services VPCs each month. A network engineer must recommend a design for communication between the VPCs.
Which solution meets these requirements at the LOWEST cost?
- A Create a transit gateway. Peer each VPC to the transit gateway. Use zonal DNS names for the NLB in the services VPCs to minimize cross-AZ traffic from the ingress VPC to the services VPCs.
- B Create an AWS PrivateLink endpoint in every Availability Zone in the ingress VPC. Each PrivateLink endpoint will point to the zonal DNS entry of the NLB in the services VPCs.
- C Create a VPC peering connection between the ingress VPC and each of the 10 services VPCs. Use zonal DNS names for the NLB in the services VPCs to minimize cross-AZ traffic from the ingress VPC to the services VPCs.
- D Create a transit gateway. Peer each VPC to the transit gateway. Turn off cross-AZ load balancing on the transit gateway. Use Regional DNS names for the NLB in the services VPCs.
Community Discussion