How do I create an SQL Server Always On availability group cluster in Amazon EC2?

Resolution

Prerequisites: Make sure that the domain AWS account has the permissions required to create the cluster and use computer objects. For instructions, see Grant the user permissions to create the cluster and Required access rights when using a pre-created computer object on the Microsoft website.

To deploy SQL Server Always On availability groups on your Amazon EC2 instance, see Deploy SQL Server Always On availability groups (AG) on Deployment options.

It's a best practice to configure at least three private IP address for each node. These addresses include the primary IP address, the cluster IP address, and one IP address for each availability group. Failover Cluster Manager virtually manages the cluster, so use Dynamic Host Configuration Protocol (DHCP) instead of static IP addresses.

Make sure that your configuration allows the following network traffic:

• Outbound traffic from the EC2 instance servers to the Active Directory Servers on TCP ports 53, 88, 389, 464, 636, 3268, and 3269.
• Outbound traffic from the EC2 instance servers to the Active Directory Servers on UDP ports 123, 53, 88, 389, and 464.
• All traffic between EC2 instance servers on TCP ports 135, 139, 445, 1433, 2383, 3343, 5022, 5985, and 5986.
• All traffic between EC2 instance servers on UDP ports 137, 138, 445, 1434, 2382, 3343, and 49152-65535.
• Outbound traffic from the client application servers to the EC2 instance servers on TCP ports 1433, 1434, 5022, 2382, 2383.
• Outbound traffic from the client application servers to the EC2 instance servers on UPD ports 1434 and 49152-65535.

Related information

Best practices and recommendations for SQL Server clustering on Amazon EC2

Prerequisites, restrictions, and recommendations for Always On availability groups on the Microsoft website