You are implementing a solution to deploy Netskope for machine traffic in an AWS account across multiple VPCs. You want to deploy the least amount of tunnels while providing connectivity for all VPCs.
How would you accomplish this task?
39 comments · newest first
AL
Alecia
10 months ago
GRE tunnels are more flexible for VPCs, can’t argue with that!
PE
Pearly
11 months ago
I’ve had success with IPsec tunnels before, not sure about this.
LO
Loreen
11 months ago
Wait, are IPsec tunnels really less efficient here?
AL
Allene
11 months ago
Definitely agree with that! Less overhead.
CO
Cordelia
11 months ago
I think using GRE tunnels from the AWS Transit Gateway is the way to go.
AL
Almeta
12 months ago
I’m leaning towards option D with IPsec tunnels from the Transit Gateway, but I’m a bit uncertain about the performance implications compared to GRE.
JE
Jesusita
12 months ago
I feel like using GRE tunnels from the Transit Gateway could reduce the number of tunnels needed, but I can't quite remember the specifics.
AB
Abel
12 months ago
I think we practiced a similar question, and I recall that IPsec tunnels are more secure, but I wonder if they would be efficient for multiple VPCs.
JI
Jimmie
1 year ago
I remember studying about AWS Transit Gateway and how it simplifies connectivity, but I'm not sure if GRE tunnels are the best option here.
BU
Buffy
1 year ago
I'm confident that the answer is B. The Transit Gateway is designed to simplify connectivity between VPCs, and GRE tunnels are the most flexible option for this type of deployment.
EM
Emilio
1 year ago
Okay, I think I've got this. The key is to use the AWS Transit Gateway, which can connect multiple VPCs using a single GRE tunnel. That should be the most efficient solution.
LI
Lilli
1 year ago
Hmm, I'm a bit unsure about the differences between IPsec and GRE tunnels in this context. I'll need to review the details of each to determine the best approach.
CH
Chauncey
1 year ago
This seems like a straightforward networking question. I'll need to think through the different tunnel options and which one would provide the least amount of tunnels while connecting all the VPCs.
FL
Flo
1 year ago
The key here is limiting the pods per node, so I'm leaning towards C. DaemonSet. That sounds like the right Kubernetes object to ensure that constraint.
TA
Tatum
1 year ago
Okay, let's see here. The button is supposed to display events without extracted fields, so I'm thinking the answer is Non-Extractions. Yeah, I'm confident that C is the right choice.
RO
Ronnie
2 years ago
Option B, hands down. The Transit Gateway is like the Swiss Army knife of AWS networking – it can do it all!
CH
Cherri
2 years ago
I agree, using GRE tunnels from the AWS Transit Gateway is the best choice for this scenario.
TO
Tonette
2 years ago
Option B is definitely the way to go. The Transit Gateway is so versatile.
DE
Detra
2 years ago
Guys, we all know the real answer is A. IPsec tunnels from the Virtual Private Gateway are the way to go. It's like the classic saying, 'Keep it simple, stupid.'
MI
Mickie
2 years ago
A) Yeah, but IPsec tunnels from the Virtual Private Gateway are the most straightforward option.
MA
Malcom
2 years ago
B) I think using GRE tunnels from the AWS Transit Gateway could also work.
MA
Marjory
2 years ago
A) Use IPsec tunnels from the AWS Virtual Private Gateway.
PR
Precious
2 years ago
Hold up, what about option D? Using IPsec tunnels from the Transit Gateway could be a good way to keep things secure, don't you think?
EM
Emilio
2 years ago
D) Use IPsec tunnels from the AWS Transit Gateway.
EU
Eulah
2 years ago
B) Use GRE tunnels from the AWS Transit Gateway.
YA
Yasuko
2 years ago
A) Use IPsec tunnels from the AWS Virtual Private Gateway.
MA
Marshall
2 years ago
I disagree, I believe option B) is better as GRE tunnels provide better scalability and flexibility.
PA
Pamella
2 years ago
Hmm, I'm not sure about that. I feel like option C might be better since it uses the Virtual Private Gateway, which seems more straightforward.
FR
Francoise
2 years ago
Yeah, it does make sense to use the Virtual Private Gateway for this task.
KA
Kayleigh
2 years ago
I think so too. Using GRE tunnels from the AWS Virtual Private Gateway could simplify the deployment.
ST
Stefania
2 years ago
Option C sounds like a good choice. It does seem more straightforward.
QU
Quentin
2 years ago
I think option A) is the best choice because IPsec tunnels are more secure.
RO
Rozella
2 years ago
I think option B is the way to go. Using GRE tunnels from the AWS Transit Gateway seems like the most efficient solution to me.
EM
Emelda
2 years ago
I think option B is the most efficient solution as well. It provides connectivity for all VPCs with the least amount of tunnels.
VA
Valda
2 years ago
I agree, option B using GRE tunnels from the AWS Transit Gateway is the best choice.
SH
Shasta
2 years ago
B) Use GRE tunnels from the AWS Transit Gateway.
MA
Malcolm
2 years ago
B) Use GRE tunnels from the AWS Transit Gateway.
WA
Wai
2 years ago
A) Use IPsec tunnels from the AWS Virtual Private Gateway.
GR
Gregoria
2 years ago
A) Use IPsec tunnels from the AWS Virtual Private Gateway.