Configure file storage access for specific IP addresses or subnets
You can configure file storage access for:
- all IP addresses of the private subnet where the storage is located;
- specific IP addresses;
- other private subnets.
To configure file storage access, you need to add rules or delete rules. You can select a specific access level for each rule. Rules can be added:
- when creating file storage;
- or for an existing file storage.
Access levels
Depending on the file storage protocol, you can assign an access level to the storage:
- for CIFS SMBv3 — read and write (
rw); - for NFSv4 — read only (
ro), read and write (rw).
Add rule
A new access rule list for file storages with the NFSv4 protocol is applied within 15 minutes after adding or deleting rules.
Rules are applied in the order they appear in the list — from top to bottom:
- a rule for access to storage from any IP address in a private subnet (
0.0.0.0/0); - access rules from private subnets (e.g.,
192.168.0.0/29); - access rules from specific IP addresses (e.g.,
192.168.0.10).
For example, if the rules 0.0.0.0/0, 192.168.0.0/29, 192.168.0.1 are added, access to the storage will be granted from any IP address in the private subnet.
Control panel
OpenStack CLI
-
In the Control panel, on the top menu, click Products and select File Storage.
-
Open the file storage page → Access Rules tab.
-
Click + Add Rule.
-
Enter an IP address or the CIDR of the private subnet.
-
Select an access level.
-
Optional: enter a comment for the rule.
-
Click Save.
-
Optional: to add an additional rule, click + Add Rule.
Delete rule
A new access rule list for file storages with the NFSv4 protocol is applied within 15 minutes after adding or deleting rules.
Control panel
OpenStack CLI
-
In the Control panel, on the top menu, click Products and select File Storage.
-
Open the file storage page → Access Rules tab.
-
In the rule row, click .
-
Click Delete.