Study guide
Technical reference and lesson notes
Hybrid networking design is a tradeoff between resilience, routing control, bandwidth, and operational complexity.
Core connectivity options
Site-to-Site VPN provides encrypted connectivity over the internet and is often the fastest path to establish. Direct Connect provides dedicated connectivity and more predictable network characteristics, while Transit Gateway can centralize connectivity across many VPCs and networks.
Build for failure
Production designs should assume that individual tunnels, devices, or circuits can fail. Redundant paths and deliberate route preference are part of the architecture rather than an afterthought.
- Use dynamic routing when route changes need to converge automatically.
- Separate routing domains where business or security boundaries require it.
- Document which path should win during normal operation and during failure.
Exam mindset
When a scenario emphasizes many VPCs, many accounts, and centralized connectivity, look for designs that reduce a growing mesh of point-to-point connections.