Soru

Zorluk: ZorInfrastructure Migration with AWS Application Migration Service (MGN)

An energy utility company is migrating 1212 critical grid-monitoring servers from an on-premises data center to AWS using AWS Application Migration Service (MGN). The replication traffic must travel privately over a 1 Gbps1 \text{ Gbps} AWS Direct Connect connection via an AWS Transit Gateway. The target environment is a dedicated Migration VPC. The Solutions Architect has established interface VPC endpoints for the MGN control plane in a Shared Services VPC, which is shared with the Migration VPC via Route 53 Private Hosted Zone associations. After installing the AWS Replication Agent on the source servers, the console indicates that the agents can communicate with the control plane, but the replication status remains stalled at 0%0\% progress. Which combination of actions will resolve the replication stall and resume data transfer?

  1. Ensure that the on-premises firewall permits outbound traffic on TCP Port 15001500 to the staging area subnet in the Migration VPC, and verify that the route table associated with the staging area subnet contains a route pointing to the Transit Gateway for the on-premises network CIDR.Cevap
  2. B
    Re-create the Route 53 Private Hosted Zone for the AWS Application Migration Service endpoints inside the Migration VPC, and ensure that the zone is manually associated with the Shared Services VPC.
  3. C
    Deploy a highly available pair of NAT Gateways in the staging area subnet, and update the staging subnet's route table to route replication traffic over the public internet to the AWS Application Migration Service public endpoints.
  4. D
    Configure a Direct Connect gateway to handle transitive routing directly between the Migration VPC and the on-premises data center, bypassing the Transit Gateway configuration.

Cevap

Ensure that the on-premises firewall permits outbound traffic on TCP Port 15001500 to the staging area subnet in the Migration VPC, and verify that the route table associated with the staging area subnet contains a route pointing to the Transit Gateway for the on-premises network CIDR.
The correct action is to ensure that the on-premises firewall permits outbound traffic on TCP Port 15001500 to the staging area subnet in the Migration VPC, and to verify that the staging subnet's route table contains a route to the on-premises network CIDR via the Transit Gateway. This is because AWS Application Migration Service uses TCP port 1500 for replication data transfer between the agent on the source server and the replication servers in the staging area. Without this port open and proper routing back to the source network, replication will stall at 0%0\%.

Adım Adım Çözüm

1
Analyze the replication path and identify where the failure occurs.
The agent connects to the control plane (using TCP port 443 over VPC endpoints), but data replication (which uses TCP port 1500 to the replication servers) is stalled at 0%0\%.
This indicates a data plane communication issue, not a control plane or DNS resolution issue.
2
Review firewall rules for the data plane traffic.
TCP Port 15001500 must be opened on the on-premises firewall pointing to the staging area subnet.
The AWS Replication Agent sends encrypted replicated data blocks directly to the Replication Servers in the staging area subnet on TCP port 1500.
3
Verify routing configurations in the staging area subnet.
Ensure there is a route in the staging subnet route table pointing back to the on-premises IP range via the Transit Gateway.
Bidirectional network connectivity is required so that replication servers can send acknowledgments back to the on-premises agents.

Anahtar Kavram

AWS MGN Data Replication Port and Routing Requirements
Tahmini Süre:2m 30s
Bu soruyu puanla