[[["易于理解","easyToUnderstand","thumb-up"],["解决了我的问题","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["很难理解","hardToUnderstand","thumb-down"],["信息或示例代码不正确","incorrectInformationOrSampleCode","thumb-down"],["没有我需要的信息/示例","missingTheInformationSamplesINeed","thumb-down"],["翻译问题","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["最后更新时间 (UTC)：2025-08-12。"],[],[],null,["# HA VPN topologies to increase bandwidth\n\nThis document describes HA VPN topologies that help to increase\nthe bandwidth of your HA VPN setup. If your bandwidth\nneeds exceed the Cloud VPN set limit of 250,000 packets per second, use the\nrecommended topology described in this document to increase the bandwidth of\nyour HA VPN setup.\n\nFor definitions of terms used on this page, see [Key\nterms](/network-connectivity/docs/vpn/concepts/key-terms).\n\nIncrease bandwidth of your HA VPN setup\n---------------------------------------\n\nYou can increase the bandwidth of your HA VPN setup by\nadding more tunnels, each with a unique pair of IP addresses. If you want\ndifferent IP addresses for each tunnel, create multiple\nHA VPN gateways. If you want the same IP address for\ndifferent tunnels, use the same HA VPN gateway interface\nfor these tunnels.\n\nEach Cloud VPN tunnel can handle up to 250,000 packets per second for\nthe sum of ingress and egress traffic. The bandwidth required for a tunnel\ndepends on the average packet size. 250,000 packets per second is equivalent to\na bandwidth between 1 Gbps and 3 Gbps. This bandwidth equivalent\ndepends on the average size of the packets.\n\nTo determine the number of tunnels you require, use 250,000 packets per second as\nthe sum of inbound and outbound capacity for each tunnel. For example, if you\nneed 600,000 packets per second for a total of inbound and outbound traffic, you\nneed 3 pairs of HA VPN tunnels (6 tunnels) to ensure the\nrequired bandwidth and failover capacity. If you want to use the same IP address\nfor different tunnels, all the tunnels must use the same interface of a gateway.\nFor more information about VPN bandwidth calculations, see [Network bandwidth](/network-connectivity/docs/vpn/concepts/overview#network-bandwidth).\n\nWhen configuring HA VPN to increase bandwidth, consider\nthe following guidelines:\n\n- **Check VPN tunnel quotas**\n\n Unless you are connecting an HA VPN gateway\n to another HA VPN gateway,\n each HA VPN gateway supports an unlimited number\n of VPN tunnels on each interface. If you want to have different IP addresses\n for each tunnel, you must create multiple gateways. [Quotas](/network-connectivity/docs/vpn/quotas#quotas) limit\n the total number of VPN tunnels in your project; you can\n [request additional quota](/network-connectivity/docs/vpn/quotas#requesting-additional-quota)\n to increase or decrease to this quota.\n- **Add HA VPN gateways to add tunnels between two HA VPNs**\n\n When you connect an HA VPN gateway to another\n HA VPN gateway, you can connect only one tunnel per\n interface (`0` or `1`) to the corresponding interface (`0` or `1`) on the other\n HA VPN gateway. This means you can't have two tunnels\n using the same interface on either side. [Quotas](/network-connectivity/docs/vpn/quotas#quotas)\n limit the total number of HA VPN gateways in your\n project. You can [request additional\n quota](/network-connectivity/docs/vpn/quotas#requesting-additional-quota) to\n increase this quota.\n\n To increase the number of VPN tunnels between\n HA VPN gateways, you must create additional pairs of\n HA VPN gateways.\n- **Add pairs of VPN tunnels**\n\n To increase the bandwidth between HA VPN and\n a peer VPN gateway, add more VPN tunnel pairs.\n\n For example, to double the bandwidth of an HA VPN\n gateway that connects to a peer VPN gateway with two tunnels\n (one *active* , one *passive*), add two more VPN tunnels. Add one more active\n tunnel and one more passive tunnel.\n\n The BGP sessions for all four tunnels receive the same prefixes.\n The two active tunnels receive the prefixes with the same higher priority,\n and the two passive tunnels receive the prefixes with the same lower priority.\n- **Match interfaces on the peer VPN gateway**\n\n To continue receiving an availability service level agreement (SLA), you\n must match the interfaces on your peer VPN gateway to the interfaces on your\n HA VPN gateway.\n\n When you double the bandwidth of an HA VPN gateway\n that connects to a peer VPN gateway, match the tunnels\n to the interfaces on the peer VPN gateway.\n Place the two active tunnels on interface `0` and the two passive\n tunnels on interface `1`. Alternatively, you can place\n the two active tunnels on interface `1` and the\n two passive tunnels on interface `0`.\n\n### Connect VPC networks\n\nTo increase bandwidth between two VPC networks, you can increase\nthe number of tunnels between the two HA VPN gateways in\nthe first VPC to the two peer HA VPN gateways\nin the second VPC. In this topology, the VPC can\nbe in the same or different projects. The interfaces on both VPC\nnetworks are configured consistently. For example, if you have two active tunnels,\nyou place them on interface `0` on both VPC networks.\n\nFor example, if you need your HA VPN setup to handle\n800,000 packets per second between your two VPC networks, you\nmust configure four pairs of HA VPN tunnels\n(a total of eight tunnels) to achieve this bandwidth.\n\nWe recommend that you configure only one Cloud Router per side. More\nthan one Cloud Router per side doesn't provide any benefit, unless you\nneed more BGP sessions than are supported by one Cloud Router. For\nmore information about the maximum number of BGP peers supported by a\nCloud Router, see\n[Limits](/network-connectivity/docs/router/quotas#limits).\n\nThis topology provides the following bandwidth characteristics:\n\n- Uses the Google network for data transfer.\n- Can potentially support a very large number of gateways and tunnels, leading to very high bandwidth.\n- Has a maximum bandwidth capacity of 250,000 packets per second per tunnel.\n\n\n [](/static/network-connectivity/docs/vpn/images/two-vpc-bw.svg) Connect two VPC networks to increase bandwidth (click to enlarge)\n\n \u003cbr /\u003e\n\n### Connect Google Cloud to multiple remote sites\n\nTo increase bandwidth between Google Cloud and multiple remote sites, you can\ncreate several Cloud VPN tunnels to distribute traffic and potentially\nincrease bandwidth.\n\nIn this topology, one HA VPN gateway in the\nVPC is connected to multiple remote site. Each\nremote site location establishes connectivity to Google Cloud by using\na pair of tunnels to the HA VPN gateway. The bandwidth\nis limited only by the tunnel bandwidth limit of 250,000 packets per second.\n\nThis topology provides the following bandwidth characteristics:\n\n- Uses one IP address per HA VPN interface, saving IPv4 public IP addresses.\n- Supports a bandwidth of 250,000 packets per second per tunnel and can handle a very large number of tunnels.\n- Supports a remote VPN gateway that can be one or multiple physical VPN devices.\n\n\n [](/static/network-connectivity/docs/vpn/images/gcp-to-remote-bandwidth.svg) Connect Google Cloud to multiple remote sites (click to enlarge)\n\n \u003cbr /\u003e\n\n### Connect Google Cloud to multiple remote site with Cloud Interconnect\n\nTo increase bandwidth between Google Cloud and multiple remote sites connected\nby using Cloud Interconnect, create several Cloud VPN tunnels\nto distribute traffic and potentially increase bandwidth.\n\nIn this topology, one HA VPN gateway in the\nVPC is connected to multiple geographically dispersed remote site\nlocations by using Cloud Interconnect\nlocations. Each remote site establishes connectivity to\nGoogle Cloud by using a pair of tunnels that connect to the\nHA VPN gateway. This topology requires you to configure\ntwo Cloud Router. The bandwidth is limited only by the tunnel\nbandwidth limit of 250,000 packets per second.\n\nThis topology provides the following bandwidth characteristics:\n\n- Combines Cloud Interconnect and VPC to create a solution that balances security and performance.\n- Lets you use Cloud Interconnect for large data transfers and\n VPC for secure access to specific applications or services\n within Google Cloud.\n\n\n [](/static/network-connectivity/docs/vpn/images/gcp-to-remote-interconnect-bandwidth.svg) Connect Google Cloud to multiple remote sites by using Cloud Interconnect networks (click to enlarge)\n\n \u003cbr /\u003e\n\nWhat's next\n-----------\n\n- To use high-availability and high-throughput scenarios or multiple subnet scenarios, see [Advanced configurations](/network-connectivity/docs/vpn/concepts/advanced).\n- To help you solve common issues that you might encounter when using Cloud VPN, see [Troubleshooting](/network-connectivity/docs/vpn/support/troubleshooting)."]]
