ANS-C01 · Question #75
All IP addresses within a 10.0.0.0/16 VPC are fully utilized with application servers across two Availability Zones. The application servers need to send frequent UDP probes to a single central…
The correct answer is C. The NAT gateway cannot allocate more ports. A NAT gateway can support up to 55,000 simultaneous connections to each unique destination. This limit also applies if you create approximately 900 connections per second to a single destination (about 55,000 connections per minute). If the destination IP address, the…
Question
All IP addresses within a 10.0.0.0/16 VPC are fully utilized with application servers across two Availability Zones. The application servers need to send frequent UDP probes to a single central authentication server on the Internet to confirm that is running up-to-date packages. The network is designed for application servers to use a single NAT gateway for internal access. Testing reveals that a few of the servers are unable to communicate with the authentication server.
Options
- AThe NAT gateway does not support UDP traffic.
- BThe authentication server is not accepting traffic.
- CThe NAT gateway cannot allocate more ports.
- DThe NAT gateway is launched in a private subnet.
How the community answered
(44 responses)- A5% (2)
- B18% (8)
- C68% (30)
- D9% (4)
Explanation
A NAT gateway can support up to 55,000 simultaneous connections to each unique destination. This limit also applies if you create approximately 900 connections per second to a single destination (about 55,000 connections per minute). If the destination IP address, the destination port, or the protocol (TCP/UDP/ICMP) changes, you can create an additional 55,000 connections. For more than 55,000 connections, there is an increased chance of connection errors due to port allocation errors. These errors can be monitored by viewing the ErrorPortAllocation CloudWatch metric for your NAT gateway. https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html
Topics
Community Discussion
No community discussion yet for this question.