Configure file storage access for specific IP addresses or subnets
You can configure file storage access for:
- all IP addresses of the private subnet where the storage is located;
- specific IP addresses;
- other private subnets.
To configure access to the file storage, you need to add rules or delete rules. For each rule, you can select a specific access level. Rules can be added:
- when creating a file storage;
- or for an existing file storage.
Access levels
Depending on the file storage protocol, you can assign an access level to the storage:
- for CIFS SMBv3 — read and write (
rw); - for NFSv4 — read-only (
ro), read and write (rw).
Add rule
A new access rule list for file storages with the NFSv4 protocol is applied within 15 minutes after adding or deleting rules.
Rules are applied in the order they appear in the list — from top to bottom:
- a rule for accessing the storage from any IP address of a private subnet (
0.0.0.0/0); - access rules from private subnets (for example,
192.168.0.0/29); - access rules from specific IP addresses (for example,
192.168.0.10).
For example, if the rules 0.0.0.0/0, 192.168.0.0/29, 192.168.0.1 are added, access to the storage will be open from any IP address of the private subnet.
Control panel
OpenStack CLI
-
In the control panel, in the top menu, click Products and select File Storage.
-
Open the file storage page → Access rules tab.
-
Click + Add rule.
-
Enter an IP address or the CIDR of the private subnet.
-
Select an access level.
-
Optional: enter a comment for the rule.
-
Click Save.
-
Optional: to add an additional rule, click + Add rule.
Delete rule
A new access rule list for file storages with the NFSv4 protocol is applied within 15 minutes after adding or deleting rules.
Control panel
OpenStack CLI
-
In the control panel, in the top menu, click Products and select File Storage.
-
Open the file storage page → Access rules tab.
-
In the rule row, click .
-
Click Delete.