LogoLogo
Our ServiceOther service
English
English
  • 🇬🇧VNG Cloud Help Center
  • Overview
    • About VNG Cloud
    • Product Updates (All)
      • 2024
  • vServer
    • Compute
      • What is vServer?
      • Announcements and updates
        • 2024
        • 2023
      • Getting started
        • UserData
      • Quota Limit
      • Instance
        • Connect to virtual server
          • Connecting a Windows Server by Remote Desktop (RDP)
          • Connecting to a Linux server by SSH Client
        • Flavor
        • Instance Lifecycle
        • Create an instance by using the wizard
        • Resize Instance
        • Restart Instance
        • Compute Encryption Volume
          • Using Compute Encryption Volume
      • Placement Group
      • Image
      • Network
        • Virtual Private Cloud (VPC)
        • DHCP Options Sets
          • DNS Server IP Address
        • Instance IP Address
        • Floating IP
        • External Interface
        • Virtual IP
        • Route Table
        • Peering
        • Test Internet Speed
        • Network ACL
        • Bandwidth
          • Package Bandwidth VNG Dedicated
          • Package Bandwidth Pay As You Go
          • Package Bandwidth Share
          • Package Bandwidth Dedicated
          • Payment Methods
      • Interconnect
        • Starts with Interconnect
        • Interconnect Features
        • Location connect and Bandwidth
        • Multicloud-Connection
        • Connections
          • Create a Dedicated Connection
          • View connection information
          • Update Connection
          • Delete Connection
        • UseCase
          • Multicloud Interconnect
          • Hybrid Interconnect
          • VPN Interconnect
          • Using a combination of Interconnect connection methods
      • Volume
        • Extend volume with Linux OS
        • Extend Volume with Windows OS
        • Volume Types
        • Check the IOPS performance
        • Convert Volume Type
      • Snapshot
        • Activate Snapshot
        • Create Snapshots
        • View Snapshot Information
        • Roll back VM by using a snapshot
        • Roll back a disk by using a snapshot
        • Delete Snapshot
        • How to calculate a Snapshot Service Charges
        • Disable Snapshot Service
        • UseCase Snapshot
          • Disaster Recovery
          • Develop and testing
          • Backup and restore the system periodically
          • Migrate data and applications between environments
          • Resist attacks from Hackers or malware infections
        • Share Snapshots
      • Security
        • SSH Key (Key pairs)
        • Security Groups
      • vBackup
        • Create backups for VM with policy
        • Create backups immediately (Back now)
        • Automatic Backup
        • Changing the backup policy
        • Restore Backup
        • Delete Backup
        • Backup Policies
          • Create, edit, delete backup policies
          • Schedule Structure of the Policy
      • Load Balancer
        • Deployment mode
        • Feature Comparison
        • Application Load Balancer
          • How it works (ALB)
          • Getting Started
          • Manage Load balancer
          • Listener
            • Add a HTTP listener
            • Add a HTTPS listener
            • Update & Delete a Listener
            • Listener Policies
            • Client Certificate Authentication
            • Config IP whitelist to load balancer
            • Config timeout
          • Certificate
            • Upload a certificate
          • Pool
            • Add & Update a Pool
            • Pool Members
              • Attach pool members
            • Config health check setting
            • Enable sticky session
            • Enable TLS encryption
            • Pool's algorithm
        • Network Load Balancer
          • How it works (NLB)
          • Getting Started (NLB)
          • Manage Load Balancer (NLB)
          • Listener (NLB)
            • Add a TCP Listener
            • Add a UDP Listener
            • Update & Delete Listener (NLB)
            • Config IP whitelist to load balancer
            • Config timeout
          • Pool
            • Add & Update a Pool
            • Pool Members
              • Attach pool members
            • Config health check setting (NLB)
            • Pool's algorithm
          • Common use cases
            • Config protocol Proxy with member Nginx
        • Monitor your load balancers
          • Metrics
          • Logs
        • Security
      • APIs & IaC
      • Terraform
        • Install Terraform
        • Manage vServer with Terraform
        • Manage vLB with Terraform
        • Reference Document
        • Argument Intergration with Terraform
      • Identity and Access Management (IAM) for vServer
        • Actions, resources, and required conditions for vServer Access Decentralization
        • Use Cases IAM
      • Pricing
    • vMarketplace
      • Third-party integration
      • Application Software Installation
        • Create & Install App
      • Network Software Installation
        • Juniper vSRX on HCM03
          • Create Juniper vSRX
          • Routing IP Range within VPC
        • Pfsense on HCM03
          • Create Pfsense App
          • Routing IP Range within VPC
          • VPN Client to Server
          • VPN Site to Site
            • Pfsense - AWS Cloud
          • Troublehooting - Disconnect network
          • Notice & Limitation
          • MTU & “DF flag” best practice on VNG Cloud
  • vStorage
    • Object storage
      • Object storage (HCM03, HAN01)
        • What is vStorage?
          • What is Region?
          • What is Farm?
          • Unit of Measurement
        • Announcements and Updates
        • Getting Started with vStorage
          • Step 1: Create a project
          • Step 2: Create a container
          • Step 3: Upload an object
          • Step 4: Download an object
          • Step 5: Copy Object to a Directory
          • Step 6: Delete the object and container
        • Features of vStorage
          • Working with projects
            • Projects overview
            • Project naming rules
            • Create a project
            • Viewing project properties
            • Resize a project
            • Renew a project
            • Auto-renew a project
            • Delete a project
            • Restore a project
            • IP Range ACLs for a project
          • Working with containers
            • Containers overview
            • Containers naming rule
            • Create a container
            • Viewing container properties
            • Search containers
            • Versioning container
            • Make container public
            • Make container private
            • ACLs for a container
            • CORS for a container
            • Container lifecycle
            • Delete a container
            • IP Range ACLs for a container
          • Working with directories and objects
            • Objects overview
            • Objects naming rule
            • Upload objects
            • Viewing directory and object properties
            • Search directories and objects
            • Share objects
            • Move objects
            • Copy objects
            • Rename an object
            • Set tags for objects
            • Set metadatas for objects
            • Download objects
            • Delete objects
            • Working with directories
          • Working with report
            • View summary reports across all regions
            • View summary reports on a specific region
            • View summary reports on a specific project
          • Working with trial project
          • Working with POC project
          • Working with vBackup project
          • Working with Archive project
        • Identity and Access Management
          • Managing vStorage access account
            • Root User Account
            • IAM User Account
              • Create an IAM User Account
              • Create Policies for IAM User Account
              • Attach Policies with IAM User Account
              • Delete an IAM User Account
            • Service Account
              • Create a Service Account
              • Create Policies for Service Account
              • Attach Policies with Service Account
              • vStorage Credentials
                • Create a S3 key
                • Create a Swift user
                • Attach S3 Keys and Swift Users to the Service Account
                • Delete S3 key, Swift user
              • Delete a Service Account
          • Managing Access to vStorage Resources
            • Access Permissions and Working Through vStorage
            • Access Permissions and Working Through IAM
            • Features, vStorage Resources, and Access Permissions
            • Access Permissions and Working Through Root User Account
            • Access Permissions and Working Through IAM User Account
            • Access Permissions and Working Through Service Account
        • 3rd Party Softwares
          • S3cmd
            • Integrating S3cmd with vStorage
            • Using S3cmd
          • Cyberduck
            • Integrating Cyberduck with vStorage
            • Using Cyberduck
          • Rclone
            • Integrating Rclone with vStorage
            • Using Rclone
          • Swift Client
            • Integrating SwiftClient with vStorage
            • Using SwiftClient
          • S3 SDK
            • Integrating S3 SDK with vStorage
            • Using S3 SDK
          • MinIO Client (MC)
            • Integrating MinIO Client with vStorage
            • Using MinIO Client
          • S3 Browser
            • Integrating S3 Browser with vStorage
            • Using S3 Browser
          • AWS CLI
            • Integrating AWS CLI with vStorage
            • Using AWS CLI
        • Resource Quota
        • Feature Limitations
        • Charging Fee
          • Charging for prepaid users
          • Charging for postpaid user
        • Monitoring vStorage
          • Monitoring vStorage Through Metrics
          • Monitoring vStorage Through Logs
        • Security
          • Access Control
          • Data in Transit Security
          • Data Security stored on vStorage
        • Usecase
          • Migrate data
            • [Rclone] Mount vStorage as Local Drive on Linux
            • [Rclone] Mount vStorage to Window server
            • [Rclone] Sync data from AWS S3 to vStorage
          • Optimize performance
        • API developers
          • vStorage API
            • Integrating vStorage API
            • Using vStorage API
          • vStorage Swift REST API
            • Integrating Swift REST API
            • Using Swift REST API
        • Storage gateway
          • Create and Use Storage Gateway
          • Replacing Fileserver with Gateway Application
      • Object storage (HCM04)
        • Getting Started with Object storage
          • Step 1: Create a project
          • Step 2: Create a bucket
          • Step 3: Upload/ Download objects
          • Step 4: Create a S3 Key
          • Step 5: Integrate 3rd party softwares with vStorage
          • Step 6: Use 3rd party softwares to action on vStorage
        • Features of Object Storage
          • Working with project
          • Working with bucket
            • Working with buckets via vStorage Portal
              • Bucket Versioning
              • Object Lock
              • Bucket Policy
              • Bucket ACLs
              • Bucket CORS
              • Bucket Event Notification
              • Bucket Lifecycle
            • Working with buckets via 3rd party software
          • Working with objects and directories
            • Working with objects and directories via vStorage Portal
            • Working with objects and directories via 3rd party software
          • Working with reports
        • Resource Quota
        • Access Management
          • Working with Root User Account
          • Working with IAM User Account
          • Working with Service Account
          • Working with S3 Keys
          • Limitation
        • API Developers
        • 3rd party softwares
          • S3cmd
            • Integrate S3cmd with vStorage
            • Using S3cmd
          • Cyberduck
            • Integrate Cyberduck with vStorage
            • Using Cyberduck
          • Rclone
            • Integrate Rclone with vStorage
            • Using Rclone
          • S3 SDK
            • Integrate S3 SDK with vStorage
            • Using S3 SDK
          • S3 Browser
            • Integrate S3 Browser with vStorage
            • Using S3 Browser
        • Use case
          • Migrate data
            • [Rclone] Mount vStorage on Window server
            • [Rclone] Mount vStorage as Local Drive on Linux
            • [Rclone] Sync data from AWS S3 to vStorage
        • Charging Fee
    • Filestorage
      • What is FileStorage?
      • Announcements and Updates
      • Getting Started with FileStorage
        • Create a Public NFS File Storage
        • Create a Private NFS File Storage
        • Create a Private SMB File Storage
          • Create a Private SMB File Storage without Active Directory
          • Create a Private SMB File Storage with Active Directory
          • Create a Private SMB File Storage without Active Directory
          • Create a Private SMB File Storage with Active Directory
      • Features of FileStorage
        • Create a File Storage
          • Create a NFS File Storage
          • Create a SMB File Storage without AD
          • Create a SMB File Storage with AD
        • Edit a File Storage
        • Resize a File Storage
        • Delete a File Storage
      • Specifications
      • Access Management
        • File Storage features, resources, and access
      • Resource Quota
      • Charging Fee
    • Backup with Veeam
      • Getting started with Veeam
        • Step 1: Install Veeam Backup & Replication
        • Step 2: Initialize Repository
        • Bước 3: Create Job backup
        • Step 4: Data Recovery on Veeam
      • Features of Veeam
      • Access Management
      • Charging Fee
      • Monitoring Service
      • Security
      • Use case
      • Glossary
  • Backup Center
    • Announcements and Updates
    • Cloud Backup
      • Get Started with Backup Server
      • Backup Location
        • Create and Manage backup locations
      • Backup Server
        • Create Backup Plan (Backup Server)
        • Create Backup Server Point
        • Backup Server Point Management
        • Restore resources
        • Change backup policy
        • Change backup location
      • Backup Policy
      • Pricing
      • Use case
        • Migrate backup server from vStorage to Vault (backup location)
    • Disaster Recovery Center (DRC)
      • Operating model
      • Server Disaster Recovery (SDR)
        • Getting Started with SDR
        • SDR Management
          • Automatically activate Snapshot
          • Attach a Server
          • Start Replication
          • Periodic Backup and Recovery Point
          • Test Failover
          • Failover
          • Stop & Resume Replication
          • Restart Replication
          • Recovery Point Retention
        • Pricing
        • Access Management
        • Security
        • Monitoring
        • Service Limits
  • vMonitor Platform
    • What is vMonitor Platform?
      • What is vMonitor Platform Metric?
        • Metric Quota Class
      • What is vMonitor Platform Log?
        • Log Project Class
      • What is vMonitor Platform Synthetic?
        • Synthetic Test Quota Class
    • Announcements and Updates
      • Announcement and Instructions on Switching Packages on the vMonitor Platform
    • Getting Start with vMonitor Platform
      • Getting Start with Metrics
      • Getting Start with Logs
      • Getting Start with Synthetic
    • Features of vMonitor Platform
      • Dashboard
        • Widget
          • Line
          • Bar
          • Stack area
          • Pie
          • Number
          • Table
          • Log search
        • Query
          • Metric query
          • Log query
        • Variable, Save Querying and View
      • Notification
        • Working with SMS Notification Quota
        • Working with Email Notification Quota
        • Working with Notification
          • SMS
          • Email
          • Slack
          • Teams
          • Telegram
          • Webhook
      • Alarm
        • Metric Alarm
        • Log Alarm
      • Metrics
        • Working with Metric Quota
        • Working with Metric Agent
          • Installing Metric Agent on Server
            • Linux OS
            • Linux OS has internet connection limitations
            • Window OS
        • Working with Metric Information
        • Working with Product Metric
          • Working with vServer-Metric
          • Working with vLB-Metric
          • Working with vDB-Metric
          • Working with vStorage-Metric
        • Applications support integration
          • Kubernetes
        • Supported Metrics List
          • List Host's metrics
          • List vServer's metric
          • List vLB's metrics
          • List vDB's metrics
          • List vStorage's metrics
      • Logs
        • Working with Log Project Quota
        • Working with Log Agent
          • Prepare to initiate log push connection
          • Create a Certificate
          • Install Log Agent on OS
            • CentOS
            • Debian/ Ubuntu
            • Windows
          • Install Log Agent on Docker
          • Install Log Agent on Kubernetes
        • Working with Log Project
          • Archive
          • Refill
          • Log mapping
          • Field mapping
        • Working with Log search
          • Search logs
          • Export logs
        • Working with Log pipeline
          • Processor Groups
          • Processor
            • Grok Parser
              • Grok Patterns
            • JSON Parser
            • CSV Parser
            • Field Remapper
            • Date Parser
            • GEO IP Parser
            • User-agent Parser
        • Working with Log2metric
        • Working with Product Logs
          • Working with vLB-Log
          • Working with vStorage-Log
          • Working with vCDN-Log
      • Synthetics
        • Working with Synthetic Test Quota
        • Working with Synthetic API Test
          • API Test with HTTP(s)
          • API Test with Ping
          • API Test with TCP
        • Working with Location
          • Public location
          • Private location
    • Identity and Access Management
    • Resource Quota
    • Pricing
    • Security
      • Access Permissions Security
      • Data Security During Transmission
  • VKS
    • What is VKS?
    • How VKS works?
    • Announcements and Updates
      • Release notes
    • Getting Started with VKS
      • Instructions for installing and configuring the kubectl in Kubenetes
      • Create a Public Cluster
        • Create a Public Cluster with Public Node Group
        • Create a Public Cluster with Private Node Group
          • Palo Alto as a NAT Gateway
          • Pfsense as a NAT Gateway
      • Create a Private Cluster
      • Expose a service through vLB Layer4
      • Expose a service through vLB Layer7
        • Automatically manage Certificates in VKS with Nginx Ingress Controller, Cert-Manager, and Let's Encr
      • Preserve Source IP when using NLB and Nginx LoadBalancer Controller
      • Integrate with Container Storage Interface (CSI)
      • Upgrading Control Plane Version
      • Upgrading Node Group Version
      • Use Terraform to create a Cluster and Node Group
      • Working with NVIDIA GPU Node Group
    • Clusters
      • Public Cluster and Private Cluster
      • Upgrading Control Plane Version
      • Whitelist
      • Stop POC
    • Node Groups
      • Auto Healing
      • Auto Scaling
      • Upgrading Node Group Version
      • Lable and Taint
    • Network
      • Working with Application Load Balancer (ALB)
        • Ingress for an Application Load Balancer
        • Configure for an Application Load Balancer
        • ALB Limitation
      • Working with Network load balancing (NLB)
        • Integrate with Network Load Balancer
        • Configure for a Network Load Balancer
        • NLB Limitation
      • CNI
        • Using CNI Calico Overlay
        • Using CNI Cilium Overlay
        • Using CNI Cilium VPC Native Routing
      • Load Balancer
        • Using Network Load Balancer
        • Using Application Load Balancer
      • Auto Scaling
      • Fleet Management
    • Storage
      • Working with Container Storage Interface (CSI)
        • Integrate with Container Storage Interface (CSI)
        • CSI Limitation
    • Security Group
    • Migration
      • Migrate Cluster from VKS to VKS
      • Migration Cluster from vContainer to VKS
      • Migrate Cluster from another platform to VKS
      • Migrate Limitation
    • Working VKS with Terraform
    • Monitoring
      • Metrics
    • Charging Fee
    • Reference
      • Kubernetes versions
      • Node Flavors
      • System Image
  • vDB
    • Relational Database Service (RDS)
      • Create a RDS Instance
      • Connect to RDS Instance
        • Connect to an RDS Instance via SSH Tunnel
      • Managing RDS Instance Information
      • Backing Up RDS Instance
      • Restoring RDS Instance
      • Managing Configuration Group in RDS Instance
      • Extend the usage period RDS Instance
      • Monitoring vDB with vMonitor Platform
      • Import Data into RDS Instance (MySQL/MariaDB) using mysqldump
      • Creating Read Replicas
      • Promote Read Relica to Standalone
      • vDB PostgreSQL - Supported Extensions
      • Configuring Replication with RDS (MySQL/MariaDB)
      • Attention & Limitations
    • MemoryStore Database Service (MDS)
      • Create MDS Instance
      • Connect MDS Instance
      • Manage MDS Instance
      • Manage MDS Config Group
      • Backup MDS Instance
    • Security (Bảo mật)
  • vCDN
    • Overview
      • What is CDN?
      • Overview Architecture
        • Network Architecture
        • Load Coordination Mechanism
        • Data Distribution Mechanism
          • PULL
          • PUSH
    • Getting Started with vCDN
      • Live Streaming
      • Video On Demand Streaming
      • Object Download
      • Web Accelerator
      • Transcoding and advanced features
        • Operating Model
        • Install Sigma Media Server
        • Use cases
          • Create Live Transcode Channel
          • Live Transcode combines recordings for later VOD playback
          • Create Simultaneous Restream Channels to Multiple Platforms (RTMP)
          • Transcode video files (MP4)
        • Sigma API developers
      • Using OBS Studio to Push Live Stream
    • Feature details
      • Security Link
      • CNAME
      • Cache Time
      • Development Mode
      • Origin
        • HTTP Origin
        • Object Storage S3
        • Host Origin
      • Optimize File Size
      • Cryptography
      • Caching
      • Automatically Redirect from HTTP to HTTPS
      • CDN Purge Cache
      • Page Rule
    • Access Management
    • Pricing
    • API Developers
    • Monitoring
    • Report
    • Security
      • Certificate Management
  • vCloudstack
    • Get Started with vCloudStack
      • Overview of features
      • Initialize VM on vCloudStack
      • Network Configuration
      • Load Balancer in vCloudStack
        • Create Application LB in vCloudStack
          • Listener for Application LB
          • Pool in vCloudstack
          • Certificate in vCloudstack
        • Create Network LB in vCloudStack
          • Listener for Network LB
          • Pool (NLB) in vCloudStack
        • Advanced Features
      • Volumes in vCloudStack
      • Backup in vCloudStack
      • Snapshots in vCloudStack
    • Get start with Admin Site
      • User Management
      • Access Management
      • Track resource usage information
      • Physical Infrastructure Monitoring
  • vContainer Registry
    • Getting Started
    • Repository
      • Create a repository
      • Edit quota limit
      • Manage image
      • Repository History
    • Repository user
      • Create repository user
      • Edit user information
      • Edit user permission
      • Refresh secret key
      • Change user status
  • vColocation
    • Accessing the vColo Customer Portal
    • Dashboard
    • Space list
      • View rack layout
      • View rack detail
      • Filter list
    • Ticket request
      • Open a ticket
      • Ticket list
  • DataSync
    • What is DataSync?
    • Announcements and Updates
    • Getting Start with DataSync
    • Features of DataSync
      • Create a Transfer Job
      • Run a Transfer Job
        • Run one time
        • Run schedule
      • Monitor Transfer Job Results
      • Stop a Transfer Job
      • Edit a Transfer Job
      • Xóa Transfer Job
      • Retry a Transfer Job
    • Identity and Access Management
      • Managing DataSync access account
        • Root User Account
        • IAM User Account
          • Create an IAM User Account
          • Create Policies for IAM User Account
          • Attach Policies with IAM User Account
          • Delete an IAM User Account
      • Managing Access to DataSync Resources
        • Features, DataSync Resources, and Access Permissions
        • Access Permissions and Working Through IAM
        • Access Permissions and Working Through Root User Account
    • Resoure Quota
    • Charging Fee
    • Monitoring
      • Monitoring DataSync Through Metrics
      • Monitoring DataSync Through Logs
    • Security
      • Data in Transit Security
      • Access Control
      • Data Security stored on vStorage
    • Usecase
      • Transfer data from Amazon S3 to vStorage
      • Transfer data from vStorage to vStorage cross account
      • Transfer data from vStorage to vStorage same account
  • vNetwork
    • Endpoint
      • Create Endpoint
      • Rename Endpoint
      • Delete Endpoint
      • View List of Endpoints
    • Public NAT Instance
      • Create NAT
      • Rename NAT
      • Delete NAT
      • Add/ Remove NAT Port
    • Cross Connect
      • Create Cross Connect
      • Create a VPC Connection
      • Delete Cross Connect
      • Resize Bandwidth
      • Bandwidth Packages
      • VPC Connection Conditions
      • UseCase
    • VPN (Virtual Private Network) Site To Site
      • Create VPN Site-to-Site
        • VPN Connect Condition
        • Add/Update/Delete more Site And Tunnel
        • Support IPSEC Configuration
      • Change VPN Bandwidth
      • VPN Packages
      • Delete VPN
      • Demo Site-to-Site VPN
      • FAQ
  • Key Management System
    • Customer Managed Key
    • VNG Cloud Managed Key
  • Service Health
  • Veka.ai
  • Identity and Access Management (IAM)
    • Getting Start with IAM
    • Common Usecases
      • Access control by job function
      • Access control to specific resources
      • Managing Resources with Terraform and Service Account
      • Use Deny permission to deny access
      • Authorization for access between root user accounts with Service Account Impersonate feature
    • IAM for VNG Cloud's Services
      • IAM for vServer
      • IAM for vStorage
      • IAM for vMonitor
      • IAM for DataSync
    • Types of IAM Identifiers
      • User Accounts
        • How to login to VNG Cloud
      • User Groups
      • Service accounts
      • vStorage Credential
      • Identity Providers
    • IAM Access Management
      • Access Management via Policy
      • VNG Managed Policy
    • Audit Logs Management
    • Limitation
    • Security for IAM
  • Billing & Payment
    • vConsole – Management channel for billing and resources
      • What is vConsole
      • Getting Started
    • What's Billing & Payment
    • Experience with Billing & Payment
      • Prepaid & Postpaid Users
      • Resource lifecycle management
        • Create resource
        • Resize resource configuration
        • Renew resource
        • Auto-renew resources - policy & terms
        • Recover resource
        • Delete resource
        • Resource POC
          • Converting resource from POC to Prepaid
      • Payment
        • Online payment
        • Payment of POC resources
        • Credit hold
        • Automatic invoice payment
        • Apply coupon at payment step
      • Invoice management
  • vCalculator - Service estimated tool
  • Partner Portal user guide
    • Partner Portal Overview
    • Partner Registration
    • Registration of Partner Discount
    • Registration of Partner's Customer
    • Set Up Discounts for Customers
    • Top up Credit for Customer
    • View Report on Partner Portal
    • DEAL Registration
    • View List of DEAL
    • View Detail Deal Information
    • Update Deal Stage
    • View Partner Discount by Deal
    • View Customer Discount by Deal
  • Getting start with VNG Cloud account
    • Register
    • Update Profile
    • Two-Factor Authentication (2FA)
    • Change Password Guide
    • Remove Account Guide
    • Change Phone Number Guide
  • FAQ
    • vServer
    • vStorage
    • vNetwork
    • vCDN
    • vDB
    • NTP server
    • DDoS
Powered by GitBook
LogoLogo

Address

  • VNG Corporation

Contact us

  • support@vngcloud.vn
  • 1900 1549

About us

  • About VNG Cloud
  • Get started our cloud
On this page
  • Create a Windows server on vServer
  • Connect to the Windows server
  • Create an Active Directory on Windows Server
  • Install and configure DNS Server
  • Create a Forward Lookup Zone
  • Create a Reverse Lookup Zone
  • Check DNS name
  • Install and configure Active Directory Domain Services
  • Create a File Storage
  • Map the File Storage to Windows server
  • Through the interface
  • Through command line
  • Through File Explorer
  • Write data to File Storage
  1. vStorage
  2. Filestorage
  3. Getting Started with FileStorage
  4. Create a Private SMB File Storage

Create a Private SMB File Storage with Active Directory

PreviousCreate a Private SMB File Storage without Active DirectoryNextCreate a Private SMB File Storage without Active Directory

Last updated 4 months ago

To create an SMB (Server Message Block) with Active Directory on the File Storage system, you can follow these steps:

Create a Windows server on vServer

Below is a basic guide for initializing Windows server on vServer, if you already have a server, skip this step.

Instructions for creating Windows server

Before you can perform Windows server initialization, make sure you create a VPC, Subnet on the vServer system. Next, follow the steps below to create a Windows server:

  1. Log in to vServer at .

  2. Continue to select Servers .

  3. Select Create a Server.

  4. In the Basic Configuration section , enter the Server name to describe the name for your Server. The Server name can consist of letters (az, AZ, 0-9, '_', '-'). The input data length is between 5 and 50. It cannot contain leading or trailing spaces and the Server name must be different from the Username.

  5. Select the Zone where you want to create the server.

  6. Enter Tag information including Key / Value for the server and click Add to add this tag if you need.

  7. Select OS Images: Windows, continue to select Window version depending on your usage needs.

  8. Under Instance type, there is a list of Flavor configurations, you can choose the desired Flavor configuration for your Server according to. iot.v1.small1x1 is recommended by us as a default basic configuration to create the Server

  9. In Volume Settings , enter the configuration for Boot OS Volume (Root) including Size GB , Volume Type SSD and IOPS , then select Next.

  10. In addition, you can add Data Volume to the Server during the initialization process by selecting Add Data volume, then enter the configuration for the Data Volume including Volume name , Size GB , Volume Type SSD and IOPS , select Next.

  11. Next, select the Network settings parameter : Here you can select VPC to assign Private IP to Server and Subnet from the list you created earlier, or you can click to create a new VPC and Subnet. Note that after creating VPC and Subnet, it will be displayed on the list page for you to choose during Server initialization:

    1. Check the Floating IP box to assign Public IP to the Server (Click to see instructions for attaching/ detach Floating IP)

    2. Security group to manage ACL - Access Control List for Server. (Click to see instructions for creating and managing Security group)

  12. Enter Authentication information : Empty: the system will automatically generate and attach a password or the user can manually adjust and enable or disable skipping the first password change.

  13. In Other Settings , you can choose Server Group or not according to your needs. You can assign Server to previously created Groups (With properties such as same Compute Host or different Compute Host)

  14. Select Launch Server and follow the payment steps to complete the server initialization.

Attention:

Security Groups on Windows server need to open the following ports to share data:

  • With NFS File Storage: open additional port 2049

  • With SMB File Storage with Basic Authentication: open additional port 445

  • With SMB File Storage with Active Directory Authentication: open additional port list to be able to connect from File Storage to AD.


Connect to the Windows server

Below is a basic guide for connecting to Windows server on vServer, if you have used Console directly on vServer Portal, please skip this step.

Connect to Windows server

To be able to connect to a Windows server, you first need to install RDP: By default, Windows includes an RDP Client. To verify, type mstsc at the Command Prompt window. If your computer does not recognize this command, check the Windows home page and search for a download for the application .

  1. Access the Server management page in our driver at:

  2. Select the Server you want to connect to, then select Action, then select Connect.

  3. On the Connect to Server page , select the RDP (Window) tab

  1. Select Download RDP File . Your browser will prompt you to open or save the RDP file. When you've finished downloading the file, select Done to return to the server page:

  1. Open the downloaded file to remote to Windows server. Select Connect to continue connecting to your server.

  1. The administrator account is selected by default. You need to copy and paste the password you saved earlier into the login pop-up (This information is taken from the email), in which enter the information InstanceLogin into Username , InstancePassword into Password.

  1. Select OK. Due to the nature of self-signed certificates, you may receive a warning that the security certificate cannot be validated. Use the following steps to verify the identity of the remote computer, or simply select Yes (Windows) or Continue (Mac OS X) if you trust the certificate.

  1. The screen will show that the connection to the Windows server is successful.

After you have connected to Windows server, you need to make sure your Windows server has a static IP address, you can check and configure static IP according to the following instructions:

  • Check the VM's network configuration by:

    • Go to Control Panel > Network & Internet > Network Connections .

    • Select the Ethernet adapter , right-click and select Properties .

  • Set up a static IP address:

    • In the Properties screen , select Internet Protocol Version 4 (TCP/IPv4) and then click the Properties button .

    • Select Use the following IP address to set up a static IP address.

    • Provide address information:

      • IP Address: static IP address of the VM.

      • Subnet Mask: Corresponding subnet, for example: 255.0.0.0

      • Preferred DNS server: IP address of DNS Domain (usually also the static IP address of VM) (you can add it after initializing DNS domain according to the instructions below)


Create an Active Directory on Windows Server

To create an Active Directory on Windows Server, you need to do the following:

  • Install and configure DNS Server

  • Create a Forward Lookup Zone

  • Create a Reverse Lookup Zone

  • Check DNS Name

  • Install and configure Active Directory

Specifically, please follow the steps below:

Install and configure DNS Server

To install and configure DNS Server on Windows Server, you can follow these steps:

  1. From the Desktop screen , open the Start menu and select Server Manager.

  2. Select All Servers, right click then select Add roles and Features

  1. On the Before you begin page, click Next

  1. On the Installation Type page : Select Role-based or feature-based installation then select Next

  1. In Server Selection : select Select a server from the server pool and select the current server then select Next

  1. In Server Roles : Tick DNS Server then click Next and Install to install.

  1. At this point, you will be prompted to add the necessary features for the DNS Server, select Add Features if you agree with the defaults.

  1. On the Confirmation page , review your selections and click Install to begin installing the DNS Server.

  1. Once the installation is complete, click Close .

Create a Forward Lookup Zone

Next, you will need to create a Forward Lookup Zone to convert the domain to an IP address. Here are the steps:

  1. Open DNS Manager by selecting Tools , then selecting DNS

  1. In DNS Manager, select the existing DNS and continue to right-click on Forward Lookup Zones and select New Zone

  1. The Create new zone screen appears, continue to select Next

  1. At the Zone Type screen : select Primary zone, then select Next

  1. At the Zone Name screen : enter your domain name and select Next . For example: example.local. Remember this domain because this is the DNS domain you need to use to create AD and enter information when creating File Storage on the File Storage Portal system.

  1. At the Zone File screen , select Next

  1. At the Dynamic Update screen : Select Do not allow dynamic updates , then select Next

  1. Select Finish to complete creating the New Zone.

  1. After selecting Finish , you will see the forwarding lookup zone on the main screen as shown.

  1. After creating the zone, you need to add a record for the Domain Controller by selecting the newly created Zone , right-clicking and selecting New Host (A or AAAA)

  1. On the New Host screen , you need to:

  • Name : Enter your Windows server name (eg: demo-smb).

  • IP Address : Enter the static IP address of the Domain Controller (eg: 10.50.3.9).

  • Click Add Host .

  1. If you choose Create associated pointer (PTR) record , you need to create a Reverse Loopup Zone , the initialization steps are similar to creating a Forward Lookup Zone .

Create a Reverse Lookup Zone

Next, you will need to create a Reverse Lookup Zone to convert the IP to a domain. Specifically, the steps are as follows:

  1. Open DNS Manager by selecting Tools , then selecting DNS

  1. In DNS Manager, select the existing DNS and continue to right-click on Reverse Lookup Zones and select New Zone

  1. At the Zone Type screen : select Primary zone, then select Next

  1. The Create new zone screen appears, select IPv4 Reverse Lookup Zone and continue to select Next.

  1. At the Reverse Lookup Zone Name screen : enter Network ID, the Network ID here is the subnet of the IP that you need to perform reverse lookup and select Next . For example: 10.50.3.

  1. At the Zone File screen , you can create a new Zone File or select an existing Zone File, then select Next.

  1. At the Dynamic Update screen : Select Do not allow dynamic updates , then select Next

  1. Select Finish to complete creating the New Zone.

  1. After selecting Finish , you will see Reverse lookup zone on the main screen as shown

  1. After creating a reverse lookup zone , you need to create a Pointer (PTR) by selecting the newly created Zone , right-clicking and selecting New Pointer (PTR)

  1. On the New Resource Record screen , you need to:

    1. Host IP Address : Enter the static IP address of the Domain Controller (eg: 10.50.3.9).

    2. Host Name: Enter your Windows server name (eg: demo-smb).

    3. Click OK .

Check DNS name

On your Windows server, open Command Prompt and run:

nslookup <DNS Domain>
or
nslookup <IP Address>

For example:

nslookup example.local
hoặc
nslookup 10.50.3.9

The result displays an example as follows:

nslookup example.local
---
Server: demo-smb
Address: 10.50.3.9
Name: example.local

nslookup 10.50.3.9
---
Server: demo-smb
Address: 10.50.3.9

Install and configure Active Directory Domain Services

To install and configure Active Directory Domain Service on Windows Server, you can follow these steps:

  1. From the Desktop screen , open the Start menu and select Server Manager

  2. Select All Servers, right click then select Add roles and Features

  1. In the Before You Begin section , select Next

  1. In Installation Type : Select Role-based or feature-based installation then select Next

  1. In Server Selection : select Select a server from the server pool and select the current server then select Next

  1. In the Server Roles section : Tick Active Directory Domain Services.

  1. At this point, you will be prompted to add the required features to Active Directory, select Add Features if you agree with the defaults, then select Next

  1. On the Feature page , keep the default parameters and select Next

  1. On the AD DS page, select Next

  1. On the Confirmation page , review your selections and click Install to begin installing AD DS.

  1. After selecting Install . The system will start installing, you do not need to restart the server immediately after installation.

  2. When the installation is complete, you continue to select Promote this server to a domain controller

  1. At the Deployment Configuration screen , select Add a new forest then enter the DNS domain name created (which is the Zone name created in the Create a Forward Lookup Zone step) then select Next

  1. At the Domain Controller Options screen , enter the Password and Confirm Password for your DSRM.

  1. In the DNS Option section, you skip it and just click Next.

  1. In the Additional Options section , check the NetBIOS name again and change it if necessary, then select Next. The NetBIOS domain name is a shortened domain of the Root domain name,

  1. At the Paths screen , you can change the paths to the Database folder, Log file folder, Sysvol or keep them as the system default, then select Next.

  1. At the Review Options screen , review the parameters and select Next if the information is correct.

  1. At the Prerequisites Check screen , you will see the test results, continue to select Install for the system to install AD.

  1. After the installation process is complete, the system will automatically restart your server, you need to log back into the server with the Administrator account.

Attention:


Create a File Storage

Step 2: Select File Storage then select Create a File storage.

Step 3: At the File Storage initialization screen, you need to enter/select:

  • File Storage name: the descriptive name of the storage file. The file name must be between 5 and 50 characters long and can include the characters a-z, AZ, 0-9, '-', '_'

  • Description : enter a description for the storage file.

  • File storage type: select the type of drive you want to use. Currently we only provide Standard HDD drive type.

  • Protocol: select NFS and the NFS version you want

  • Tag: you can add tags to mark file storage as needed.

  • File Storage Max quota: in the file storage initialization step, you need to set a maximum quota limit for that file storage. This quota means the limit of storage capacity that the file storage can use, helping to manage resources effectively. The minimum quota you need to choose is 1 TB and the maximum quota we provide is 50 TB. If you need to use more than 50 TB for a file storage, please contact us.

  • Network type : for SMB file type, network type must be Private. At this point, you need to select VPC , Subnet that you have created from vServer Portal.

  • Window Authentication: Configure access rights via Active Directory Authentication

    • Active Directory Authentication: If your Windows server uses Active Directory to manage users and access, AD Authentication is easy to integrate and centrally manage. You can authenticate via Active Directory domain name, DNS server IP addresses, Username, Password on your Active Directory. For example, for the Active Directory created above, I would enter:

      • Active Directory domain name : This is the Root domain name you created in the step of Installing and configuring Active Directory Domain Services . For example:example.local

      • DNS server IP Address : DNS Server IP address, usually also the static IP address of the VM, for example: 10.50.3.9. If you have 2 DNS IPs, you can enter according to the form 10.50.3.3,10.50.3.9

      • Username: Admin account name, for exampleAdministrator

      • Password : The password you created in the Install and configure Active Directory Domain Services step , for example:123456789aA@

      • Confirm Password: Confirm password, for example:123456789aA@

Step 5: Select Create File Storage.

Step 6: After the system has completed initializing the SMB File Storage, you can get the File Storage IP Address information in the File Storage details section and continue to perform the steps below.


Map the File Storage to Windows server

On Windows Server, you can map SMB file storage through the interface or command line.

Through the interface

  1. Open File Explorer.

  2. Right click on This PC and select Map network drive .

  3. In the Map Network Drive window :

    1. Drive letter : Select a drive letter (eg: Z:).

    2. Folder : Enter the SMB share path, for example: \\<File Storage IP Address>\<File Storage Name>. For example \\10.50.3.8\demo-smb.

    3. Select Finish , once done, you can check in File Explorer to see the mapped drive.

Attention:

  • To automatically map the SMB storage file each time Windows Server starts, you can save the information when mapping through the interface by checking the Reconnect at sign-in box before clicking Finish .

Through command line

Use the following command in Command Prompt or PowerShell :

net use Z: \\<File Storage IP Address>\<File Storage Name> 
  • Z: : Is the drive letter you want to mount.

  • \\<File Storage IP Address>\<File Storage Name> : File Storage SMB path.

For example:

net use Z: \\10.50.3.8\demo-smb

Through File Explorer

More simply, you can also directly access the SMB File Storage via File Explorer through the following steps:

  1. Open File Explorer : Press Windows key + E or click the File Explorer icon.

  2. Enter UNC Path : In the address bar, enter the UNC path to the file share. For example:

\\10.50.3.8\demo-smb
  1. Press Enter .


Write data to File Storage

After you have successfully mapped the SMB File Storage to Windows Server, you can write data to the File Storage as follows:

  1. Open a text editor (Notepad):

    • On Windows Server, open Notepad by:

      • Click Start and type Notepad , then press Enter .

    • Or, press Windows key + R , type notepadand press Enter .

  2. Write content to file:

    • In Notepad, type something simple, for example:

      Copy

      Đây là file test ghi vào SMB share.
    • Or enter whatever content you want.

  3. Save file to SMB file storage:

    • Click File > Save As... .

    • In the Save As dialog box , navigate to the drive that you mapped the SMB share to (eg: Z:).

    • Name the file (eg: testfile.txt).

    • Click Save to save the file.

  4. Check files in SMB share:

    • Open File Explorer (shortcut: Windows + E ).

    • Navigate to the SMB drive (eg. Z:).

    • Find and open the file testfile.txtyou just saved to verify the contents.

You can grant permissions to AD accounts or groups through Group Policy or ACL access permissions. For more details, see .

Step 1: Go to

here
https://efs.console.vngcloud.vn/overview
https://hcm-03.console.vngcloud.tech/vserver
here
here
here
Microsoft Remote Desktop
https://hcm-3.console.vngcloud.vn/vserver/v-server/cloud-server