Quiz Entry - updated: 2026.10.16
In the compute-cluster design, which two variants exist for getting the results to the production network, and what does each assume?
Variant 1 adds a second VPN from the cloud cluster directly to the OT production network. Variant 2 reuses the existing network: results come through the one VPN into the IT network and pass from there through a firewall into the OT network, which assumes an IT-to-OT connection already exists.
| Variant 1: additional VPN | Variant 2: use existing network | |
|---|---|---|
| Path of the results | Cloud cluster → own VPN → OT production LAN | Cloud cluster → VPN → IT network → firewall → OT LAN |
| Assumption | None about IT/OT connectivity | An IT-LAN to OT-LAN connection already exists |
| Trade-off | Another tunnel and VPN router to run, but IT and OT stay separate | Fewer components, but relies on and widens the IT-OT link |
In both variants the on-premises side is segmented: the client LAN, the server LAN with the experience database, and the OT network are separate private LANs with firewalls between them.