An enterprise is designing a mission-critical financial data ingestion and processing system on Google Cloud. The system must withstand both zonal and complete regional infrastructure failures with an RPO close to zero and an automated, minimal RTO without requiring manual failover procedures. Which architecture meets these requirements?

Deploy a Global External Application Load Balancer routing traffic to regional ingestion services across two regions, buffer events using global Pub/Sub topics, and persist state to a multi-region Cloud Spanner instance.: ### What the Multi-Region Active-Active Architecture Is This architecture implements a fully distributed **active-active multi-region deployment pattern** on Google Cloud. It utilizes globally distributed and multi-regional managed services that natively provide fault tolerance and data synchronization across separate geographic failure domains without requiring manual failover intervention. ### How It Meets the Zero RPO and Minimal RTO Requirements - **Automated Regional Routing (Minimal RTO)**: A **Global External Application Load Balancer** provides a single anycast IP front end that automatically detects regional backend outages and dynamically steers client ingestion traffic to healthy regional Compute Engine or GKE clusters. - **Global Ingestion Buffering**: **Cloud Pub/Sub** is a globally scoped service where topics can accept messages from any region, ensuring high availability and continuous ingestion during infrastructure disruptions. - **Synchronous Cross-Region Consistency (RPO ~ 0)**: A **multi-region Cloud Spanner instance** uses synchronous replication and distributed consensus across regions, ensuring strong consistency (external consistency) and zero data loss in the event of an entire regional failure. ### Key Advantages and Capabilities - **Built-in Redundancy**: Avoids single points of failure (SPOFs) at networking, compute, messaging, and database layers. - **Zero-Touch Automated Failover**: Health checks and global load balancing seamlessly reroute incoming data streams during disasters without DNS propagation delays. - **High Availability SLA**: Multi-region Cloud Spanner configurations deliver industry-leading **99.999% availability SLAs**. - **Separation of Concerns**: Decouples data computation from durable distributed storage. ### Why This Is Optimal Choosing global and multi-regional resources over regional or zonal constructs minimizes operational complexity and eliminates the risk of human error during disaster recovery events.