A network architect is designing a highly secure, private network connection between a company's on-premises data center and its resources hosted in a public cloud provider. This connection needs to ensure data encryption and maintain a consistent, dedicated bandwidth without traversing the public internet. Which type of network connection should be implemented?
- AWireless Bridge
- BSite-to-site VPN over the Internet
- CPublic Internet Gateway
- DDirect Connect / ExpressRoute (Private Link)
Show answer & explanationAnswer & explanation
Correct answer: D. Direct Connect / ExpressRoute (Private Link)
Direct Connect (AWS) or ExpressRoute (Azure) are examples of private dedicated connections between an on-premises data center and a public cloud provider. These services offer consistent network performance, lower latency, and enhanced security by bypassing the public internet, making them ideal for scenarios requiring dedicated bandwidth and high security.
Why the other options are wrong
- A. A wireless bridge is typically used for connecting two local wired networks wirelessly over short to medium distances and is not suitable for secure, dedicated, high-bandwidth connections to a cloud provider.
- B. A site-to-site VPN over the internet uses encryption but still traverses the public internet, which does not guarantee consistent bandwidth or avoid the public internet entirely.
- C. A public internet gateway is used to provide internet access to cloud resources, which is explicitly what the scenario wants to avoid for the private connection.
Cloud Private Connectivity
Cloud private connectivity solutions (e.g., AWS Direct Connect, Azure ExpressRoute) establish a dedicated, private network connection between an on-premises environment and a public cloud provider. These connections bypass the public internet, offering improved security, consistent bandwidth, and lower latency.
- Dedicated, private physical connection.
- Bypasses the public internet.
- Offers consistent bandwidth and lower latency.
- Enhanced security for sensitive data transfer.
Memory trick: Private Link: 'P' for 'Private' and 'Performance' bypasses the public.