Shulou(Shulou.com)06/02 Report--

Azure provides fully hosted file sharing services in the cloud, accessible via the industry-standard Server Message Block (SMB) protocol. Azure file shares can be mounted simultaneously by cloud or on-premises deployments of Windows, Linux, and macOS.

As we all know, in the first two years, due to the virus "bad rabbit" attack, the National Internet Emergency Center and other security agencies advised users to close ports 445 and 139 on computers and network devices in time, so domestic operators basically closed these two ports, while Azure file storage uses SMB protocol, resulting in many customers unable to access Azure file storage properly locally.

What if local applications also want to access cloud file sharing storage? In fact, we can deploy NFS services in the cloud ourselves, and we can achieve the same effect.

1. First, we create a Windows virtual machine on Azure (the creation process is omitted), and add the role-NFS server in the server manager.

2. After the NFS server role is installed, you can create a new share

3. Here's the profile, select NFS Share-Quick

4. The path of the shared folder can be customized in which volume

5. Identity authentication, here I choose serverless authentication, which can be selected according to the requirements of enterprise security policy.

6. In sharing permissions, we can add access to computers. I select all computing surfaces here. Later, I will restrict them on NSG through IP whitelist.

7. View the results of successful creation

8. At this step, we still cannot successfully access the contents of the shared folder. After the client is mounted, it prompts that there is no permission ("Permission Denied") to create a file or folder. The Unix anonymous account ID=-2 does not exist under Windows. We need to add this special user ID to the corresponding NTFS access control permission (ACL). Here we use the nfsfile command (this command needs to be used after the NFS service role is installed) to complete.

nfsfile /v /ru=-2 /rg=-2 /s /cx F:\shares\gpufile

9. Use the mount 192.168.0.1:/gpufile z: command again on the client side to mount, and you can successfully access it.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.