Discussions specific to object storage
Post Reply
StephanF
Enthusiast
Posts: 54
Liked: 16 times
Joined: Mar 26, 2015 1:15 pm
Contact:

Used ports and URLs for Azure Blob Storage

Post by StephanF » Mar 07, 2019 12:57 pm

Hello,

is there a documentation which URLs need to be contacted to use Azure Blob Storage and what ports are used? I just found a page in the User Guide refering to restore to Azure.
We want to use the Archive Tier feature but keep our firewall config as restricted as possible.

Regards,
Stephan

Gostev
SVP, Product Management
Posts: 25323
Liked: 3770 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: Used ports and URLs for Azure Blob Storage

Post by Gostev » Mar 07, 2019 1:09 pm

Hello Stephan, I am pretty sure it's just HTTPS for blob storage. Thanks!

StephanF
Enthusiast
Posts: 54
Liked: 16 times
Joined: Mar 26, 2015 1:15 pm
Contact:

Re: Used ports and URLs for Azure Blob Storage

Post by StephanF » Mar 07, 2019 1:20 pm 1 person likes this post

Hello Gostev,

I think you are right. But opening port 443 to all destinations may not be necessary if we knew the exact URLs or IPs that are used. I can see the URL of the BLOB-Servive in the properties of the Azure storage account (xxx.blob.core.windows.net). But opening the firewall to this destination is not enough. There seem to be som more needed destinations I couldn't find yet.

Regards,
Stephan

StephanF
Enthusiast
Posts: 54
Liked: 16 times
Joined: Mar 26, 2015 1:15 pm
Contact:

Re: Used ports and URLs for Azure Blob Storage

Post by StephanF » Mar 11, 2019 4:30 pm 4 people like this post

Hi all,

I just wanted to answer my question myself. Maybe somenone is interested in this in the future.

You just have to open your firewall from your Veeam server to two hosts:
1. xxx.blob.core.windows.net <-- The URL of your blob storage in Azure. This one you can get from the Azure management portal.
2. ocsp.msocsp.com <-- This one is needed for checking the SSL certificate of the Azure site.

Additionally you can set a firewall rule in the Azure storage account to just accept connections from your IP address range. This makes it even more secure.

Regards,
Stephan

Gostev
SVP, Product Management
Posts: 25323
Liked: 3770 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: Used ports and URLs for Azure Blob Storage

Post by Gostev » Mar 11, 2019 4:50 pm

Thanks so much for sharing the solution, Stephan!

Post Reply

Who is online

Users browsing this forum: No registered users and 2 guests