search

MicrosoftDocs / azure-docs

Open source documentation of Microsoft Azure
https://docs.microsoft.com/azure
Creative Commons Attribution 4.0 International
10.12k stars 21.19k forks source link

NSGs configuration for DB migration confusion #70356

Closed akamienski closed 3 years ago

akamienski commented 3 years ago

Hello,

I think there's a confusion or typo in documentation about the configuration of NSGs for each migration solution. Documentation states, that in case of offline migration to SQL MI, I should:

"Ensure that your virtual network Network Security Group rules don't block the following outbound communication ports to Azure Database Migration Service"

But for the same offline solution, in case of regular SQL DB PaaS it says that I should open inbound connections. It's exactly the other way around for Online solution - inbound for SQL MI, and outbound for SQL DB PaaS. Shouldn't the configuration of NSG be the same regardless of what DB type we will choose, but rather dependent on migration method, i.e. online or offline? The way it's described now doesn't make sense to me.

Document details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

AnuragSharma-MSFT commented 3 years ago

@akamienski Thank you for the feedback. We are actively investigating and will get back to you soon.

AnuragSharma-MSFT commented 3 years ago

@akamienski Could you please help me in locating the statement "Ensure that your virtual network Network Security Group rules don't block the following outbound communication ports to Azure Database Migration Service" as mentioned in your question? I could not locate it in the article.

akamienski commented 3 years ago

@akamienski Could you please help me in locating the statement "Ensure that your virtual network Network Security Group rules don't block the following outbound communication ports to Azure Database Migration Service" as mentioned in your question? I could not locate it in the article.

It's included in second point under Prerequisites in documentation about SQL MI Migration. For regular SQL PaaS service, it's in point 6.

pochiraju commented 3 years ago

Hello akamienski, You are right, there is a typo in the pointed document, please consider that as an outbound rule, we will fix the doc. More over please use the below doc for consolidated Network port requirements. https://docs.microsoft.com/en-gb/azure/dms/resource-network-topologies Thanks Raj

AnuragSharma-MSFT commented 3 years ago

@pochiraju Thanks for providing the details and covering the issue. @akamienski Please let us know if this helps or we would be glad to assist if you have any other queries.

AnuragSharma-MSFT commented 3 years ago

@akamienski We will now proceed to close this thread. If there are further questions regarding this matter, please comment and we will gladly continue the discussion.