A company is deploying third-party firewall appliances for traffic inspection and NAT capabilities in its VPC. The VPC is configured with private subnets and public subnets. The company needs to…

Question

Options

• ADeploy a Gateway Load Balancer with the firewall appliances as targets. Configure the firewall
• BDeploy a Gateway Load Balancer with the firewall appliances as targets. Configure the firewall
• CDeploy a Network Load Balancer with the firewall appliances as targets. Configure the firewall
• DDeploy a Network Load Balancer with the firewall appliances as targets. Configure the firewall

• A
  6% (2)
• B
  68% (23)
• C
  9% (3)
• D
  18% (6)

Explanation

https://docs.aws.amazon.com/whitepapers/latest/building-scalable-secure-multi-vpc-network- infrastructure/using-nat-gateway-and-gwlb-with-ec2.html Some third-party appliances can support SNAT and overlay routing (two-arm mode) therefore eliminating the need to create NAT gateways for saving costs. However, consult with an AWS partner of your choice before using this mode as this is dependent on vendor support and Given the above link, is it advisable to choose an option which does not fall into Best Practices but may have some lower cost, not established with all vendors.

No community discussion yet for this question.