Skip to content

Create a Migration Plan

The plan creation wizard guides you through a series of steps that capture everything the suite needs to generate networking guidance, tool recommendations, cutover strategies, and downloadable assets. Each step builds on the previous one, so the suite can tailor its output to your specific environment.

  1. Sign in to the Kafka Mobility Intelligence suite.

  2. Navigate to the Dashboard.

  3. Select the Migration Plans tab.

  4. Click New Plan.

The wizard opens with the first step. Complete each section below in order.


Specify the source and destination environments for the migration.

  • Source Selection: Choose the source cluster type and authentication mechanism (for example, AWS MSK with SCRAM authentication).
  • Destination Selection: Choose the destination cluster type (for example, Confluent Cloud).

The suite uses these selections to architect the migration bridge, filter compatible connectivity methods, and determine which security protocols apply.

Cluster type selection in the plan wizard


When the suite detects an AWS-based source cluster, it offers automated provisioning through KCP (Kafka Cloud Provisioner).

KCP provides two key capabilities:

  • Automated Discovery: Scans your AWS environment for MSK configurations, including topics, schemas, and networking details.
  • Target Infrastructure Provisioning: Auto-provisions Confluent Cloud infrastructure to match the source configuration.

KCP automated provisioning options


Define what assets to include in the migration.

Asset types:

  • Topics
  • Schemas
  • Consumer Groups
  • ACLs

Environment category:

CategoryCharacteristics
ProductionStrict SLAs, zero-downtime requirements, comprehensive monitoring
Non-ProductionRelaxed constraints, faster testing cycles, cost-efficient resource allocation

Migration scope selection


This step appears when the migration involves AWS MSK discovery or KCP provisioning.

Credential Type: Choose from Access Key, Assume Role, or Environment credentials.

Provide the following details as applicable:

  • AWS Account ID
  • Secret Access Key
  • AWS Regions where source MSK clusters are located

AWS credentials configuration


Define the networking profile for the source cluster.

  • Public Accessibility: Toggle whether the source cluster is publicly accessible.
  • Source Network Type: Select from Public Internet, VPC Peering, PrivateLink, Transit Gateway, Private Network Interface, Private Service Connect, VPN/Direct Connect, or Direct Connect.
  • Network Restrictions: Indicate any firewalls, IP whitelisting rules, NAT gateways, port restrictions, or proxies that affect connectivity.

Source cluster networking configuration


Configure the destination cluster networking. This section mirrors the source cluster configuration.

  • Choose an existing cluster, or select Destination cluster is not yet set up to use KCP provisioning.
  • Specify the Cloud Provider and Region.
  • Configure networking: public access toggle, Network Type (Public Internet, VPC Peering, PrivateLink, Transit Gateway, Private Network Interface, Private Service Connect, VPN/Direct Connect, Direct Connect), and any restrictions.

Target cluster networking configuration


The suite evaluates the network profiles captured in the source and target steps and presents viable connection methods.

  • Connection methods: Public Internet with TLS, VPC Peering, PrivateLink, Transit Gateway, Cross-Region Peering, VPN Overlay, Dedicated Interconnect, or VPN/Direct Connect.
  • Automated warnings: The suite flags cross-cloud migration concerns such as egress costs and latency implications.

Inter-cluster connectivity evaluation


Choose a migration strategy that determines how applications are redirected during cutover.

Manual cutover approach. Applications must be individually reconfigured to point to the new cluster after migration completes.

Gateway strategy selection


When Gateway-Assisted Migration is selected, configure the gateway deployment.

Deployment Environment: Docker Compose or Kubernetes.

Broker Routing Strategy:

StrategyDescription
SNI-BasedHostname-based routing through a single port
Port-BasedEach broker is assigned a unique port

Authentication Mode: Identity Passthrough or Credential Swapping.

Infrastructure settings:

  • Gateway Domain: The fully qualified domain name (FQDN) for the gateway.
  • Secret Store: Choose from AWS Secrets Manager, HashiCorp Vault, Azure Key Vault, or File-based.
  • Compute Tier: Select the compute tier appropriate for your throughput requirements.

Gateway configuration details


If schema migration is included in the migration scope, this step captures planning details that inform the suite’s recommendations for schema handling.

Schema registry planning details


Based on your answers throughout the wizard, the suite recommends a migration tool.

The recommendation includes:

  • Recommended tool: The best-fit migration tool for your environment.
  • Rationale: Why this tool is recommended given your source, target, and scope.
  • Alternative tools: Other viable options.
  • Trade-offs: Key differences between the recommended and alternative tools.

Tool preference recommendation


Define how the cutover from source to destination will be executed.

Strategy types:

StrategyDescription
Big BangSimultaneous switch of all workloads at a single point in time
RollingIncremental migration in waves, moving workloads gradually
Gateway AssistedNetworking-layer shift managed by the gateway, transparent to applications

Delivery Guarantee:

GuaranteeBehavior
At-Least-OnceDuplicates are acceptable; simplest to implement
Exactly-OnceClean cutover with coordinated downtime; no duplicates or loss
At-Most-OnceSome data loss is acceptable; fastest cutover
Zero-Producer-DowntimeProducers experience no interruption during cutover; mirroring continues until after producer switch-over

Cutover planning configuration


Provide an overview of the applications that interact with Kafka topics on the source cluster.

  • Consumer Groups: Applications consuming from source topics.
  • Producers: Applications producing to source topics.

Application dependencies overview


Identify any Kafka Connect usage that is relevant to the migration plan.

Connector identification


The final step presents a summary of all planning inputs collected throughout the wizard. Review each section to confirm accuracy.

Click Create to finalize the plan. The completed plan becomes available from the Migration Plans tab on the Dashboard, where you can view its details, download assets, or create a migration job.

Plan review and creation summary