Skip to content

Commit 6685556

Browse files
Merge pull request #214305 from khdownie/kendownie101222-2
Fixed typo
2 parents b05f5d7 + df363f2 commit 6685556

File tree

1 file changed

+7
-8
lines changed

1 file changed

+7
-8
lines changed

articles/storage/file-sync/file-sync-firewall-and-proxy.md

Lines changed: 7 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,10 @@
11
---
2-
title: Azure File Sync on-premises firewall and proxy settings | Microsoft Docs
2+
title: Azure File Sync on-premises firewall and proxy settings
33
description: Understand Azure File Sync on-premises proxy and firewall settings. Review configuration details for ports, networks, and special connections to Azure.
44
author: khdownie
55
ms.service: storage
66
ms.topic: how-to
7-
ms.date: 04/13/2021
7+
ms.date: 10/12/2022
88
ms.author: kendownie
99
ms.subservice: files
1010
ms.custom: devx-track-azurepowershell
@@ -14,26 +14,25 @@ ms.custom: devx-track-azurepowershell
1414

1515
Azure File Sync connects your on-premises servers to Azure Files, enabling multi-site synchronization and cloud tiering features. As such, an on-premises server must be connected to the internet. An IT admin needs to decide the best path for the server to reach into Azure cloud services.
1616

17-
This article will provide insight into specific requirements and options available to successfully and securely connect your server to Azure File Sync.
17+
This article provides insight into specific requirements and options available to successfully and securely connect your server to Azure File Sync.
1818

1919
We recommend reading [Azure File Sync networking considerations](file-sync-networking-overview.md) prior to reading this how to guide.
2020

2121
## Overview
2222

23-
Azure File Sync acts as an orchestration service between your Windows Server, your Azure file share, and several other Azure services to sync data as described in your sync group. For Azure File Sync to work correctly, you will need to configure your servers to communicate with the following Azure services:
23+
Azure File Sync acts as an orchestration service between your Windows Server, your Azure file share, and several other Azure services to sync data as described in your sync group. For Azure File Sync to work correctly, you'll need to configure your servers to communicate with the following Azure services:
2424

2525
- Azure Storage
2626
- Azure File Sync
2727
- Azure Resource Manager
2828
- Authentication services
2929

3030
> [!NOTE]
31-
> The Azure File Sync agent on Windows Server initiates all requests to cloud services which results in only having to consider outbound traffic from a firewall perspective. <br /> No Azure service initiates a connection to the Azure File Sync agent.
31+
> The Azure File Sync agent on Windows Server initiates all requests to cloud services which results in only having to consider outbound traffic from a firewall perspective. No Azure service initiates a connection to the Azure File Sync agent.
3232
3333
## Ports
3434

35-
Azure File Sync moves file data and metadata exclusively over HTTPS and requires port 443 to be open outbound.
36-
As a result all traffic is encrypted.
35+
Azure File Sync moves file data and metadata exclusively over HTTPS and requires port 443 to be open outbound. As a result, all traffic is encrypted.
3736

3837
## Networks and special connections to Azure
3938

@@ -139,7 +138,7 @@ The following table describes the required domains for communication:
139138
> When allowing traffic to &ast;.afs.azure.net, traffic is only possible to the sync service. There are no other Microsoft services using this domain.
140139
> When allowing traffic to &ast;.one.microsoft.com, traffic to more than just the sync service is possible from the server. There are many more Microsoft services available under subdomains.
141140
142-
If &ast;.afs.azure.net or &ast;.one.microsoft.com is too broad, you can limit the server's communication by allowing communication to only explicit regional instances of the Azure Files Sync service. Which instance(s) to choose depends on the region of the storage sync service you have deployed and registered the server to. That region is called "Primary endpoint URL" in the table below.
141+
If &ast;.afs.azure.net or &ast;.one.microsoft.com is too broad, you can limit the server's communication by allowing communication to only explicit regional instances of the Azure File Sync service. Which instance(s) to choose depends on the region of the storage sync service you have deployed and registered the server to. That region is called "Primary endpoint URL" in the table below.
143142
144143
For business continuity and disaster recovery (BCDR) reasons you may have created your Azure file shares in a storage account that is configured for geo-redundant storage (GRS). If that is the case, your Azure file shares will fail over to the paired region in the event of a lasting regional outage. Azure File Sync uses the same regional pairings as storage. So if you use GRS storage accounts, you need to enable additional URLs to allow your server to talk to the paired region for Azure File Sync. The table below calls this "Paired region". Additionally, there is a traffic manager profile URL that needs to be enabled as well. This will ensure network traffic can be seamlessly re-routed to the paired region in the event of a fail-over and is called "Discovery URL" in the table below.
145144

0 commit comments

Comments
 (0)