You are tasked with deploying a Compute Engine application in a single VPC that spans two distinct regions. This application is required to maintain secure communication over VPN with an on-premises network. Considering the following options, how should you establish the VPN to ensure reliable connectivity?