Follow our setup guide to connect Azure Blob Storage to Verodat.
Prerequisites
To connect Azure Blob Storage to Verodat, you need:
An Azure Blob Storage container holding files with supported file types and encodings
The ability to grant gathe360 the ability to read and list files from this container
Setup instructions
Step 1 - Select connection method
First decide whether to connect Verodat to your Azure Blob Storage container directly, using an SSH tunnel, or using Azure Private Link.
Connect directly
Verodat connects directly to your Azure Blob Storage container. This is the simplest connection method.
To connect directly, create a firewall rule to allow access to Verodat IPs.
Connect using Private Link (BETA)
IMPORTANT: You must have a Verodat Enteprise plan to use Azure Private Link.
Azure Private Link allows Virtual Networks (VNets) and Azure-hosted or on-premises services to communicate with one another without exposing traffic to the public internet. Learn more in Microsoft's Azure Private Link documentation.
Contact our support team and they will assit you with your Azure Private Link setup
Connect using SSH (TLS optional) (BETA)
Verodat connects to a separate server in your network that provides an SSH tunnel to your Azure Blob Storage container. You must connect through SSH if your container is in an inaccessible subnet on a virtual network.
To connect using SSH, create a firewall rule to allow access to your SSH tunnel server's IP address.
Before you proceed to the next step, you must follow our SSH connection instructions to give Verodat access to your SSH tunnel. If you want Verodat to tunnel SSH over TLS, follow Azure's TLS setup instructions to enforce a minimum TLS required version on your namespace.
Step 2 - Create a Shared Access Signature in Azure
Open the Azure Portal.
Select your storage account and click Shared access signature.
Select Blob from the Allowed services options.
Select Container and Object from the Allowed resource types options.
Select Read and List from the Allowed permissions options.
Choose the appropriate start and expiry dates of your SAS.
IMPORTANT: When the SAS expires, you will have to update your Azure Blob Storage connector to resume syncing files.(Optional) To enhance security, safelist Verodats IP address range under Allowed IP addresses. Azure only allows one IP range per SAS token.
IMPORTANT: Use the IP range format to safelist the IP addresses, for example,35.234.176.144 - 35.234.176.151, because the CIDR format, for example,35.234.176.144/29, is not supported in Azure Portal.Select HTTPS only from the Allowed protocols options. We recommend to select the HTTPS option to ensure the security of your files.
Click Generate SAS and connection string.
Make a note of the Connection string value. You need to enter this value in the Connection String field in the connector setup form.
Step 3 - Finish Verodat Configuration
In the connect blob storage setup form on Verodat enter the Connection string.
In the connet blob storage form on Verodat enter the container name.
Click test connection.
If you have any further issues connecting to the service please reach out to our support team and they will be happy to help.