A systems administrator is setting up the target AWS environment for an infrastructure migration using AWS Application Migration Service (MGN). The administrator needs to configure the network settings in the replication template. Which of the following network configuration settings are required to allow the replication servers in the staging area to successfully receive replicated data from the source servers and communicate with the service? (Select TWO.)
- A security group assigned to the replication servers that permits incoming traffic on TCP port 1500 from the source agents.Answer
- Outbound network connectivity from the replication servers in the staging subnet to the MGN service endpoints over TCP port 443.Answer
- CA Route 53 Private Hosted Zone configured in the target VPC to resolve the domain names of the on-premises source servers.
- DA Transit Gateway routing configuration that permits bi-directional data synchronization between the replication servers and the source servers.
- EA single NAT Gateway deployed in one Availability Zone to handle outbound replication traffic for replication servers in all Availability Zones.
Answer
To successfully set up AWS Application Migration Service (MGN) staging area networking, the replication servers must be allowed to receive incoming data traffic from the source servers over TCP port 1500, and they must have outbound network connectivity to the MGN API endpoints over TCP port 443.
The correct configurations are allowing incoming traffic on TCP port 1500 to the replication servers and allowing outbound TCP port 443 from the staging area to MGN service endpoints. The replication agent on the source machine establishes a connection to the replication server in the staging area over port 1500 to stream data blocks. Additionally, replication servers must be able to communicate with the MGN control plane via HTTPS (port 443) to report replication progress and receive instructions.
Step-by-Step Solution
Key Concept
AWS Application Migration Service (MGN) replication architecture relies on replication servers in a staging area. These servers require inbound data replication over TCP port 1500 from the source agents, and outbound control plane communication over TCP port 443 to the MGN service endpoints.