Deploying API implementations to CloudHub11% of the exam
CloudHub Connectivity to Customer Networks
Compare classic CloudHub private connectivity methods and validate routing, endpoint capabilities, shared route budgets and VPN limitations.
Compare and contrast the options for CloudHub networking in the presence of customer-owned Amazon VPCs and on-premises data centers.
~7 min read · 6 practice questions
What the exam expects
- Compare private connectivity to a customer-owned Amazon VPC and an on-premises network.
- Match static or dynamic VPN routing to endpoint capabilities.
- Budget route entries and shared virtual-gateway capacity across connections.
- Reject unsupported combinations rather than assume more tunnels remove product constraints.
An Anypoint VPC is the CloudHub virtual network; VPC peering directly connects VPCs; IPsec secures a network tunnel; BGP advertises dynamic routes; a VPN endpoint terminates the customer side; the VGW is the MuleSoft-side virtual private gateway (Connectivity, Anypoint VPN). The scope is classic CloudHub networking, rather than CloudHub 2 private spaces.
Sources for this section (2)
Key facts
On-premises connection
- Detail
- IPsec supports a secure network-to-network tunnel.
VPC peering
- Detail
- Customer Amazon and Anypoint VPCs must be in the same region.
Dynamic VPN
- Detail
- Requires BGP peering and route-based tunnel interfaces.
- Source
- VPN (opens in a new tab)
Direct Connect
- Detail
- Requires BGP; static routing is unsupported.
Default route
- Detail
- Unsupported with either BGP or static VPN routing.
- Source
- VPN (opens in a new tab)
Route budget
- Detail
- 95 entries per VPC across connections.
Gateway capacity
- Detail
- Connections share a VGW maximum of 1.25 Gbps.
- Source
- VPN (opens in a new tab)
Unsupported VPN design
- Detail
- NAT, IPv6 and VPN plus Direct Connect in one VPC.
- Source
- VPN (opens in a new tab)
Sources for this section (2)
- Why does absence from the tested-device list not by itself rule out a VPN endpoint?
- When no device-specific file is available in Get VPN Config, which reference should be used?
- When packets are too large to transmit, at which stage must the endpoint be able to fragment them?
The questions are free to read. Answers with their sources and self-grading are included with the pack.
Keep reading with the MuleSoft Platform Architect pack
- Core concepts
- Exam traps
- Worked scenario
The pack includes:
- All 47 lessons of the MuleSoft Platform Architect guide, with reading progress
- Interactive decision walks and step-by-step sequence steppers
- Practice exams purchase adds inline bank questions and topic practice (6 questions for this lesson)
- An official source cited for every claim
- An AI tutor that answers from the guide
- Choose guide-only, practice-only, or save $4 with both