我需要告诉客户吗?防火墙以确保我们的azure.storage.blobs依赖的软件可以工作吗?

发布于 2025-01-20 02:08:37 字数 561 浏览 0 评论 0原文

我们的软件使用 Azure.Core、Azure.Storage.Blobs 和 Azure.Storage.Common 与北欧(即爱尔兰)持有的 Azure Blob 存储帐户进行交互

我们将文件存储在此类存储帐户的各种容器中

我们的一些客户有非常严格的要求有关访问“互联网”的政策,我们被要求提供一些有关此的信息,我不得不承认我不确定。

我可以执行诸如 ping someblobaccounthere.blob.core.windows.net 之类的操作,这将为我提供一个 IP 地址,但它总是相同的 IP 地址吗? Azure.Storage.Blobs 和关联的 DLL 如何与此类帐户交互?

请求是通过 HTTPS 发出的,还是这些 DLL 通过其他协议进行交互,我是否需要告诉它们打开某些端口,或者 443 和(http 为 80)等默认端口是否可以工作?这对代理来说会很好吗?

我确实在谷歌上进行了一些搜索,但我的谷歌福让我失败了,我没有找到明确的答案。

我们的应用程序是为 .NET Framework 4.8 构建的 - 以防万一。

Our software uses Azure.Core, Azure.Storage.Blobs and Azure.Storage.Common to interact with Azure Blob Storage Accounts held in North Europe (i.e. Ireland)

We store files in various containers in such Storage Accounts

Some of our clients have very strict policies regarding access to "the internet" and we are asked to provide some information about this, and I have to admit I'm not sure.

I can do something like ping someblobaccounthere.blob.core.windows.net and that will give me an IP address, but will it always be the same IP address? How do Azure.Storage.Blobs and associated DLLs interact with such an account?

Are the requests made through HTTPS or are these DLLs interacting through other protocols, do I need to tell them to open certain ports or will default ports such as 443 and (80 for http) work? Will this play nice with proxies?

I did have a bit of a google around but my Google Fu is failing me and I'm not finding clear answers.

Our apps are built for .NET Framework 4.8 - in case that is significant.

如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。

扫码二维码加入Web技术交流群

发布评论

需要 登录 才能够评论, 你可以免费 注册 一个本站的账号。

评论(1

随心而道 2025-01-27 02:08:37

您可以通过此链接:

此文件包含公共 Azure 整体、公共内每个 Azure 区域的 IP 地址范围,以及公共 Azure 中的存储、SQL 和 AzureTrafficManager 等多个 Azure 服务(服务标签)的范围。该文件当前仅包含 IPv4 地址范围,但不久的将来的架构扩展将使我们能够支持 IPv6 地址范围。每个服务标签都表示为一组云范围内的范围,并按该云内的区域进行细分。该文件每周更新一次。文件中出现的新范围至少在一周内不会在 Azure 中使用。请每周下载新的 json 文件并在您的站点执行必要的更改,以正确识别 Azure 中运行的服务。

恕我直言,Azure 存储应配置为仅使用 https 所以 https 端口应该是开放的。

You can view/download the ip ranges from this link:

This file contains the IP address ranges for Public Azure as a whole, each Azure region within Public, and ranges for several Azure Services (Service Tags) such as Storage, SQL and AzureTrafficManager in Public. This file currently includes only IPv4 address ranges but a schema extension in the near future will enable us to support IPv6 address ranges as well. Service Tags are each expressed as one set of cloud-wide ranges and broken out by region within that cloud. This file is updated weekly. New ranges appearing in the file will not be used in Azure for at least one week. Please download the new json file every week and perform the necessary changes at your site to correctly identify services running in Azure.

IMHO Azure storage should be configured to use https only so the https port should be open.

~没有更多了~
我们使用 Cookies 和其他技术来定制您的体验包括您的登录状态等。通过阅读我们的 隐私政策 了解更多相关信息。 单击 接受 或继续使用网站,即表示您同意使用 Cookies 和您的相关数据。
原文