Skip to content

Commit a21316a

Browse files
Merge pull request #235592 from jimmart-dev/jammart-storage-global-service-endpoints-ga-fixes
Jammart storage global service endpoints ga fixes
2 parents acb71de + da9ff3c commit a21316a

File tree

3 files changed

+10
-10
lines changed

3 files changed

+10
-10
lines changed

articles/storage/elastic-san/elastic-san-connect-linux.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ description: Learn how to connect to an Azure Elastic SAN Preview volume from a
44
author: roygara
55
ms.service: storage
66
ms.topic: how-to
7-
ms.date: 04/11/2023
7+
ms.date: 04/24/2023
88
ms.author: rogarana
99
ms.subservice: elastic-san
1010
ms.custom: references_regions, ignite-2022, devx-track-azurepowershell
@@ -69,7 +69,7 @@ az network vnet subnet update --resource-group "myresourcegroup" --vnet-name "my
6969

7070
Now that you've enabled the service endpoint, configure the network security settings on your volume groups. You can grant network access to a volume group from one or more Azure virtual networks.
7171

72-
By default, no network access is allowed to any volumes in a volume group. Adding a virtual network to your volume group lets you establish iSCSI connections from clients in the same virtual network and subnet to the volumes in the volume group. For details on accessing your volumes from another region, see [Azure Storage global service endpoints](elastic-san-networking.md#azure-storage-global-service-endpoints).
72+
By default, no network access is allowed to any volumes in a volume group. Adding a virtual network to your volume group lets you establish iSCSI connections from clients in the same virtual network and subnet to the volumes in the volume group. For details on accessing your volumes from another region, see [Azure Storage cross-region service endpoints](elastic-san-networking.md#azure-storage-cross-region-service-endpoints).
7373

7474
# [Portal](#tab/azure-portal)
7575

articles/storage/elastic-san/elastic-san-connect-windows.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ description: Learn how to connect to an Azure Elastic SAN Preview volume from a
44
author: roygara
55
ms.service: storage
66
ms.topic: how-to
7-
ms.date: 04/11/2023
7+
ms.date: 04/24/2023
88
ms.author: rogarana
99
ms.subservice: elastic-san
1010
ms.custom: references_regions, ignite-2022, devx-track-azurepowershell
@@ -69,7 +69,7 @@ az network vnet subnet update --resource-group "myresourcegroup" --vnet-name "my
6969

7070
Now that you've enabled the service endpoint, configure the network security settings on your volume groups. You can grant network access to a volume group from one or more Azure virtual networks.
7171

72-
By default, no network access is allowed to any volumes in a volume group. Adding a virtual network to your volume group lets you establish iSCSI connections from clients in the same virtual network and subnet to the volumes in the volume group. For details on accessing your volumes from another region, see [Azure Storage global service endpoints](elastic-san-networking.md#azure-storage-global-service-endpoints).
72+
By default, no network access is allowed to any volumes in a volume group. Adding a virtual network to your volume group lets you establish iSCSI connections from clients in the same virtual network and subnet to the volumes in the volume group. For details on accessing your volumes from another region, see [Azure Storage cross-region service endpoints](elastic-san-networking.md#azure-storage-cross-region-service-endpoints).
7373

7474
# [Portal](#tab/azure-portal)
7575

articles/storage/elastic-san/elastic-san-networking.md

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ description: An overview of Azure Elastic SAN Preview, a service that enables yo
44
author: roygara
55
ms.service: storage
66
ms.topic: how-to
7-
ms.date: 04/11/2023
7+
ms.date: 04/24/2023
88
ms.author: rogarana
99
ms.subservice: elastic-san
1010
ms.custom: ignite-2022, devx-track-azurepowershell, devx-track-azurecli
@@ -66,18 +66,18 @@ Configuring service endpoints between virtual networks and service instances in
6666

6767
When planning for disaster recovery during a regional outage, you should create the VNets in the paired region in advance. Enable service endpoints for Azure Storage, with network rules granting access from these alternative virtual networks. Then apply these rules to your geo-redundant storage accounts.
6868

69-
#### Azure Storage global service endpoints
69+
#### Azure Storage cross-region service endpoints
7070

71-
Global service endpoints for Azure became generally available in April of 2023. With global service endpoints, subnets will no longer use a public IP address to communicate with any storage account. Instead, all the traffic from subnets to storage accounts will use a private IP address as a source IP. As a result, any storage accounts that use IP network rules to permit traffic from those subnets will no longer have an effect.
71+
Cross-region service endpoints for Azure became generally available in April of 2023. With cross-region service endpoints, subnets will no longer use a public IP address to communicate with any storage account. Instead, all the traffic from subnets to storage accounts will use a private IP address as a source IP. As a result, any storage accounts that use IP network rules to permit traffic from those subnets will no longer have an effect.
7272

73-
To use global service endpoints, it might be necessary to delete existing **Microsoft.Storage** endpoints and recreate them as global (**Microsoft.Storage.Global**).
73+
To use cross-region service endpoints, it might be necessary to delete existing **Microsoft.Storage** endpoints and recreate them as cross-region (**Microsoft.Storage.Global**).
7474

7575
## Managing virtual network rules
7676

77-
You can manage virtual network rules for volume groups through the Azure portal, PowerShell, or CLI.
77+
You can manage virtual network rules for volume groups through the Azure portal, PowerShell, or CLI.
7878

7979
> [!NOTE]
80-
> If you registered the `AllowGlobalTagsForStorage` feature, and you want to enable access to your volumes from a virtual network/subnet in another Azure AD tenant, or in a region other than the region of the SAN or its paired region, then you must use PowerShell or the Azure CLI. The Azure portal does not show subnets in other Azure AD tenants or in regions other than the region of the storage account or its paired region, and hence cannot be used to configure access rules for virtual networks in other regions.
80+
> If you want to enable access to your storage account from a virtual network/subnet in another Azure AD tenant, you must use PowerShell or the Azure CLI. The Azure portal does not show subnets in other Azure AD tenants.
8181
8282
### [Portal](#tab/azure-portal)
8383

0 commit comments

Comments
 (0)