Cloud Native Qumulo on Azure Administrator Guide

The Cloud Native Qumulo (CNQ) on Azure Administrator Guide explains how CNQ works; how to deploy persistent storage, cluster compute, and cache; and how to perform post-deployment steps.

Table of Contents

• Getting Started
  • How Cloud Native Qumulo Works
  • Deploying with Terraform
  • Supported Configurations and Known Limits

• System Upgrades
  • Feature Log
  • Performing Upgrades
  • Replication Version Requirements and Upgrade Recommendations

• Authentication
  • Installing a Signed SSL Certificate
  • Installing a Custom Root CA Certificate
  • Configuring Active Directory
  • Configuring LDAP
  • Configuring SAML Single Sign-On (SSO)
  • Configuring Search Trusted Domains
  • Creating and Using Bearer Tokens

• Connecting to External Services
  • Creating and Using Access Tokens
  • Connecting a Kubernetes Cluster

• Authorization
  • Managing Role-Based Access Control (RBAC)
  • Managing Cross-Protocol Permissions
  • Using SMB Host Restrictions
  • Using Active Directory for POSIX Attributes
  • Managing File Locks

• Encryption at Rest
  • Managing Encryption at Rest

• Encryption in Transit
  • Managing SMB3 Encryption in Transit
  • How NFSv4.1 Works with Kerberos
  • Host Access Rules for NFS Exports

• Cryptographic Key Management
  • Generating and Storing ECDSA Keys
  • Managing Security Keys

• Storage Management
  • Creating and Managing Directory Quotas

• Network Configuration
  • Required Networking Ports
  • Configuring IPv6
  • Connecting to Multiple Virtual Networks
  • Configuring Round-Robin DNS on Windows Server
  • Configuring Qumulo Authoritative DNS (QDNS)

• Cloud Data Fabric
  • Enabling Cloud Data Fabric
  • Known Limits for Cloud Data Fabric
  • Configuring a Portal Relationship
  • Configuring Cache Management

• Web UI
  • Setting the Web UI Login Banner
  • Setting the Web UI Inactivity Timeout

• qq CLI
  • Getting Started with the qq CLI
  • Enabling Autocomplete for the qq CLI

• Metadata
  • Managing User-Defined Metadata

• Snapshots
  • How Snapshots Work
  • Managing Snapshots
  • Locking and Unlocking Snapshots
  • Recovering Files by Using Snapshots

• Data Replication
  • Creating and Managing a Continuous Replication Relationship
  • Shift-To Amazon S3
  • Shift-From Amazon S3

• File System Changes
  • How File System Change Notifications Work
  • Watching for Changes with SMB2 CHANGE_NOTIFY
  • Watching for Changes with REST

• NFS
  • Creating and Managing an NFS Export
  • Enabling and Using NFSv4.1
  • Managing File Access Permissions with ACLs
  • Host Access Rules for NFS Exports

• NFSv4.1 with Kerberos
  • How NFSv4.1 Works with Kerberos
  • Prerequisites for Joining to Active Directory
  • Configuring Active Directory
  • Performing Additional Cluster Configuration
  • Using Kerberos Permissions
  • Configuring a Linux Client
  • Configuring Cross-Domain Active Directory Trusts
  • Troubleshooting NFSv4.1 with Kerberos

• SMB
  • Creating and Managing an SMB Share
  • Managing File Shares by Using the Shared Folders MMC Snap-In

• S3 API
  • Configuring and Using the S3 API
  • Creating and Managing S3 Access Keys
  • Creating and Managing S3 Buckets
  • Managing Access to S3 Buckets
  • Managing Access Policies for S3 Buckets
  • Managing Multipart S3 Uploads
  • Managing S3 Bucket Versioning
  • Managing Object Lock
  • Supported Functionality and Limits

• Monitoring and Metrics
  • Enabling Nexus Remote Support
  • Enabling Cloud-Based Monitoring
  • Connecting to Cloud-Based Monitoring and S3 with a Custom Proxy
  • Restoring the Default Values for Cloud-Based and Nexus Monitoring
  • How Audit Logging Works
  • OpenMetrics API Specification