AWS drs: DRS FAQ: replace SSL bandwidth test steps with EC2 endpoint test link
Summary
The verbose 'SSL connectivity and bandwidth test' procedure (including a list of hardcoded per-region public AMI IDs for the CE-ssl-speedtest AMI and repeated instructions to open inbound TCP port 1500) is removed and replaced by a renamed section that points to a dedicated 'Running a network bandwidth test to an EC2 endpoint' page, recommending a disposable EC2 endpoint with TLS over port 1500 that is terminated after use.
Security assessment
The change is primarily an editorial consolidation: it removes stale hardcoded public AMI IDs and the in-page guidance to allow inbound TCP/1500, redirecting readers to a maintained procedure that uses TLS and a short-lived disposable EC2 instance. This reduces exposure from long-lived test servers and outdated AMIs, but the diff shows no explicit vulnerability, CVE, or incident being fixed.
Evidence
+You can measure the bandwidth available for replication by running a test over TCP port 1500 with TLS, using a disposable Amazon EC2 endpoint that you launch and then terminate. For the full procedure, see [Running a network bandwidth test to an EC2 endpoint](./network-bandwidth-test.html).
Diff
diff --git a/drs/latest/userguide/Replication-Related-FAQ.md b/drs/latest/userguide/Replication-Related-FAQ.md index b3ecd9e..11e3990 100644 --- a//drs/latest/userguide/Replication-Related-FAQ.md +++ b//drs/latest/userguide/Replication-Related-FAQ.md @@ -7 +7 @@ -Can we set specific IP addresses for the replication server or conversion server in the AWS DRS staging area?What do Lag and Backlog mean during replication?Is the replicated data encrypted?How is the replication server provisioned and managed in the Staging Area?What type of replication server is utilized in the Elastic Disaster Recovery Staging Area?What happens if the configured replication server instance type is unavailable?Does AWS Elastic Disaster Recovery compress data during replication?Are events that are generated by the AWS Elastic Disaster Recovery servers logged in Cloudtrail in AWS?How many snapshots does Elastic Disaster Recovery create?Does Elastic Disaster Recovery delete snapshots?How much capacity is allocated to the staging area?Why is 0.0.0.0:1500 added to inbound rules in the Staging Area?What should I know about rescans?How does AWS Elastic Disaster Recovery ensure that replication servers are patched and follow security best practices?Is the Elastic Disaster Recovery replication crash consistent?How can I perform an SSL connectivity and bandwidth test? +Can we set specific IP addresses for the replication server or conversion server in the AWS DRS staging area?What do Lag and Backlog mean during replication?Is the replicated data encrypted?How is the replication server provisioned and managed in the Staging Area?What type of replication server is utilized in the Elastic Disaster Recovery Staging Area?What happens if the configured replication server instance type is unavailable?Does AWS Elastic Disaster Recovery compress data during replication?Are events that are generated by the AWS Elastic Disaster Recovery servers logged in Cloudtrail in AWS?How many snapshots does Elastic Disaster Recovery create?Does Elastic Disaster Recovery delete snapshots?How much capacity is allocated to the staging area?Why is 0.0.0.0:1500 added to inbound rules in the Staging Area?What should I know about rescans?How does AWS Elastic Disaster Recovery ensure that replication servers are patched and follow security best practices?Is the Elastic Disaster Recovery replication crash consistent?How can I run a network bandwidth test to an Amazon EC2 endpoint? @@ -108,86 +108 @@ Yes, AWS Elastic Disaster Recovery's replication is crash consistent. -## How can I perform an SSL connectivity and bandwidth test? - -###### Note - -This tool is designed for AWS only. - -You can use our SSL bandwidth tool to check for replication bandwidth availability. - - 1. In your target region, launch a c5.large test server using the public AMI named CE-ssl-speedtest. - - 2. Select the same subnet as the subnet used in the replication settings of your source machine. - - 3. Make sure that the security group allows TCP Port 1500 inbound access. - - 4. On the source machine, browse to: https://{test_server_ip}:1500/speedtest - - 5. Click **Start**. - - - - -###### Note - - * Browse to the web page using the test server **public** or **private** IP according to what you defined in your replication settings. - - * The following are the AMI details per region. - - * ami-00b38c08ab3506ea7 – US East (N. Virginia) - - * ami-0bd8423a4d80563fc – US East (Ohio) - - * ami-00b7159e9c985a8da – US West (N. California) - - * ami-033a4924b13126a7b – US West (Oregon) - - * ami-0bf60b09675c8d9b6 – Africa (Cape Town) - - * ami-0f01375b50763621b – Asia Pacific (Hong Kong) - - * ami-0b1aeb50834102c18 – Asia Pacific (Mumbai) - - * ami-0b1aeb50834102c18 – Asia Pacific (Hyderabad) - - * ami-044fa8034a31d7578 – Asia Pacific (Tokyo) - - * ami-08b042df0d4c458ea – Asia Pacific (Seoul) - - * ami-0971e46306691cd68 – Asia Pacific (Osaka) - - * ami-0afd42552b236f9dd – Asia Pacific (Singapore) - - * ami-04e7cc6b5d9e8ffa1 – Asia Pacific (Sydney) - - * ami-02f31943dfd88549d – Asia Pacific (Jakarta) - - * ami-033db317ada5abd55 – Asia Pacific (Melbourne) - - * ami-01c24408802db503d – Canada (Central) - - * ami-0b8643189a66159c9 – Europe (Stockholm) - - * ami-0dd5a09d2ae8f46b3 – Europe (Ireland) - - * ami-097fb47f3a1c2bf7e – Europe (London) - - * ami-0a3f9008725d0b4d1 – Europe (Paris) - - * ami-0c65965703bb0e541 – Europe (Milan) - - * ami-01b6fcc2337f6420d – Europe (Spain) - - * ami-07b7defb87a46bb48 – Europe (Frankfurt) - - * ami-01b3e93b3ac0e1340 – Europe (Zurich) - - * ami-016edc078b48f370b – Israel (Tel Aviv) - - * ami-0c90e298af7a2e563 – Middle East (Bahrain) - - * ami-0f7c14e62ef760768 – Middle East (UAE) - - * ami-0edd5ecfc56804583 – South America (São Paulo) - - * Ensure that the security groups are configured to permit connectivity on inbound port 1500. - - +## How can I run a network bandwidth test to an Amazon EC2 endpoint? @@ -194,0 +110 @@ You can use our SSL bandwidth tool to check for replication bandwidth availabili +You can measure the bandwidth available for replication by running a test over TCP port 1500 with TLS, using a disposable Amazon EC2 endpoint that you launch and then terminate. For the full procedure, see [Running a network bandwidth test to an EC2 endpoint](./network-bandwidth-test.html).