When you use the online migration tool to migrate data from a self-managed Elasticsearch cluster to an Alibaba Cloud Elasticsearch cluster, set IP Address of ECS Instance for Self-managed Elasticsearch Cluster to the private IP address of any node in the self-managed Elasticsearch cluster. Then add a security group rule to that node: add the CIDR block of your Alibaba Cloud Elasticsearch cluster to the node's inbound whitelist, open ports 9200 and 9300, and select TCP as the protocol type.
Find your cluster's CIDR block in the table below based on your region.

Reverse whitelisted CIDR blocks in different regions
| Region ID | Reverse whitelisted CIDR block |
|---|---|
| cn-zhangjiakou | 100.104.237.0/24 |
| cn-hangzhou | 100.104.173.0/24 |
| cn-shanghai | 100.104.55.0/24 |
| cn-shenzhen | 100.104.34.0/24 |
| cn-beijing | 100.104.191.0/24 |
| cn-hongkong | 100.104.244.0/24 |
| ap-southeast-1 | 100.104.143.0/24 |
| ap-southeast-5 | 100.104.194.0/24 |
| cn-chengdu | 100.104.137.64/26 |
| cn-guangzhou | 100.104.242.64/26 |
| cn-wulanchabu | 100.104.171.128/26 |
| cn-qingdao | 100.104.185.0/24 |
| ap-southeast-3 | 100.104.10.0/24 |
| ap-northeast-1 | 100.104.68.0/24 |
| eu-central-1 | 100.104.45.0/24 |
| eu-west-1 | 100.104.14.0/26 |
| us-east-1 | 100.104.1.0/24 |
| us-west-1 | 100.104.244.0/24 |
| cn-hangzhou-finance | 100.104.49.0/24 |
| cn-shanghai-finance-1 | 100.104.144.0/24 |