active directory over site to site vpn

Question

Hi,

I have three dc's on-premises and another one I am planning on a private cloud, the link is a slow link

The reason for the cloud is just to authenticate users who are using some web application. ( the web site hosted in the private cloud and will be connected to the active directory using a ldap string )

Do I need to create a separate site for cloud ?

Please advise to design

Thanks

Answer 1

Most likely yes.
https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/designing-the-site-topology

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 2

Yes , you will need to create separate AD site , ip subnet for cloud.

Also, You will need to configure Firewall rules and setup VPN link so that AD replication works smoothly.

---

--If the reply is helpful, please Upvote and Accept as answer--