Public HTTPS egress at the source and public staging area resources

In cases where staging area resources aren't required to be on a fully isolated subnet, you can use the hybrid alternative that's shown in the following diagram.

In this scenario, only data replication traffic on TCP port 1500 goes over the private channel. The rest of the communication, both from the source subnet and the staging subnet, happen over the public network, to standard public HTTPS endpoints.