Help Center/ Server Migration Service/ Best Practices/ Best Practice for Migrating Amazon Linux EC2 to Huawei Cloud ECS/ Preparations/ Checking the Network
Updated on 2026-09-17 GMT+08:00
View PDF
Share

Checking the Network

Network Architecture

Figure 1 shows the network architecture of SMS.

Figure 1 SMS network architecture

Migration Network Requirements

  • The source servers should be able to reach Huawei Cloud API Gateway (port 443). For details, see How Do I Set Up a Secure Migration Network for Using SMS?

    It is recommended that all outbound ports on source servers be opened.

  • The source servers should be able to connect to the target IP addresses.
    • To migrate over the Internet, purchase an EIP in the target region for communicating with the source.
    • To migrate over a private network, request a Direct Connect or VPN connection for communicating with the source.
  • Port 22 must be enabled for the security groups to which the target servers belong. For more information, see How Do I Configure Security Group Rules for Target Servers?
    • For security purposes, you are advised to only allow traffic from the source servers over this port.
    • The firewall of the target servers must allow traffic to this port.

Helpful Links

Network configurations can vary in different scenarios. For details, see Network Configurations for Different Migration Scenarios

Parent Topic: Preparations