Hi Dojo, this is a follow up question from this previous post on broker gateway tests:

we're now at the intermediate stage and running the upgraded broker gateway in staging with DataMiner 10.5 CU16 and a NATS topology with leaf & core nodes - I would like to clarify the expected port requirements and connection directions for CORE/Leaf topologies (source/destination ports for each DMA).

This staging system DMS has currently two COREs interconnected via NATS gateways, with a remote Leaf DMA: in this scenario we have one leaf node sample, originally connected to CORE 1 and I'd like to achieve confirmation of the ports & services that the leaf node should connect to in CORE1 and CORE2.
The goal is keeping 2 COREs active until the legacy CORE can be removed from the DMS cluster.

A confirmation of the following would also be helpful: (I'll try to edit later to add pictures)

• Which ports must listen on which nodes for the current DataMiner/BrokerGateway implementation: 4222, 6222, 7222, 7422, 8222 and 9090
• Connection direction and firewall requirements, distinguishing listening/destination ports from client-side dynamic source ports. Our netstat output shows the Leaf initiating a connection from a source port 1189 to port 7422 on the CORE.
• Whether 7222 is required between the COREs for NATS gateway communication, regardless of the CORE/Leaf role of individual DMAs.
• Whether 8222 should listen locally on the Leaf for NATS monitoring, and whether 9090 can be used on CORE nodes, Leaf nodes, or both under BrokerGateway-managed NATS (I understand that the BrokerGateway migration replaces the legacy NAS + NATS services with NATS-Server)
• Whether the proposed transition topology, with the Leaf connected to both COREs, is supported.

A port-by-port matrix showing the expected listening node, initiating node and required firewall direction for each scenario would be particularly useful.

I know it's a lot for single question - so any steer will be helpful.

Thanks