You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: pages/index.md
+2Lines changed: 2 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -729,6 +729,7 @@
729
729
+[Forensics: How to deal with Public Cloud instances](public_cloud/compute/forensics)
730
730
+[Local Zone VPN-as-a-Service (VPNaaS) with Tailscale Integration](public_cloud/compute/local-zones-vpn-tailscale-integration)
731
731
+[Migration of instances between different regions](public_cloud/compute/migration_between_regions)
732
+
+[How to connect a Public Cloud instance to an EFS volume via vRack](storage_and_backup/file_storage/enterprise_file_storage/netapp_pci_connection_via_vrack)
732
733
+[Storage and Backup](products/public-cloud-storage)
+ [Enterprise File Storage - Connect a Public Cloud instance to an EFS volume via vRack](storage_and_backup/file_storage/enterprise_file_storage/netapp_pci_connection_via_vrack)
title: "Enterprise File Storage - Connect a Public Cloud Instance to an EFS Volume via vRack Private Network"
2
+
title: "Enterprise File Storage - Connect a Public Cloud instance to an EFS Volume via vRack Private Network"
3
3
excerpt: "Find out how to connect a Public Cloud instance to an Enterprise File Storage (EFS) volume using a vRack private network."
4
4
updated: 2025-10-23
5
5
---
@@ -31,10 +31,10 @@ This ensures that all data traffic remains on the private network, with no Inter
31
31
32
32
## Requirements
33
33
34
-
- An [Enterprise File Storage](/links/storage/enterprise-file-storage) service in your OVHcloud account
35
-
- An [OVHcloud Public Cloud instance](/pages/public_cloud/compute/public-cloud-first-steps) in the same region
36
-
- An active [vRack Private Network](/pages/public_cloud/public_cloud_network_services/getting-started-07-creating-vrack) in the same region
37
-
- Access to the [OVHcloud Control Panel](/links/manager) or the [Openstack CLI](/pages/public_cloud/public_cloud_cross_functional/loading_openstack_environment_variables)
34
+
- An [Enterprise File Storage](/links/storage/enterprise-file-storage) service in your OVHcloud account.
35
+
- An [OVHcloud Public Cloud instance](/pages/public_cloud/compute/public-cloud-first-steps) in the same region.
36
+
- An active [vRack Private Network](/pages/public_cloud/public_cloud_network_services/getting-started-07-creating-vrack) in the same region.
37
+
- Access to the [OVHcloud Control Panel](/links/manager) or the [Openstack CLI](/pages/public_cloud/public_cloud_cross_functional/loading_openstack_environment_variables).
38
38
39
39
## Overview
40
40
@@ -44,23 +44,23 @@ The diagram below illustrates how an Enterprise File Storage (EFS) volume connec
44
44
45
45
1. Critical Match — VLAN ID
46
46
47
-
The VLAN ID (e.g.,`1900`) must be identical in both the Public Cloud Private Network and the vRack Services configuration.
47
+
The VLAN ID (e.g. `1900`) must be identical in both the Public Cloud private network and the vRack services configuration.
48
48
49
49
2. Critical Match — Subnet CIDR
50
50
51
-
The Subnet CIDR (e.g.,`10.235.0.0/24`) must also match across both services to ensure they operate within the same logical network in the vRack.
51
+
The subnet CIDR (e.g. `10.235.0.0/24`) must also match across both services to ensure they operate within the same logical network in the vRack.
52
52
53
-
3. Info — Service Address Range
53
+
3. Info — Service address range
54
54
55
-
The Service Address Range (e.g.,`10.235.0.240/28`) is a reserved subset of the main subnet. These IPs are exclusively used by EFS service endpoints (e.g.,`10.235.0.241`) and must not be assigned to instances.
55
+
The service address range (e.g. `10.235.0.240/28`) is a reserved subset of the main subnet. These IPs are exclusively used by EFS service endpoints (e.g. `10.235.0.241`) and must not be assigned to instances.
56
56
57
57
4. Security — ACL Rule
58
58
59
-
The EFS volume’s Access Control List (ACL) must explicitly authorize the private IP of any instance requiring access (e.g.,`10.235.0.15`).
59
+
The EFS volume’s Access Control List (ACL) must explicitly authorize the private IP of any instance requiring access (e.g. `10.235.0.15`).
60
60
61
61
5. Concept — vRack Services
62
62
63
-
vRack Services acts as a secure network bridge, allowing managed services such as EFS outside your Public Cloud project to connect seamlessly to your private vRack network.
63
+
vRack Services acts as a secure network bridge, allowing managed services such as EFS outside your Public Cloud project to connect seamlessly to your private vRack network.
64
64
65
65
## Instructions
66
66
@@ -70,109 +70,109 @@ Before deploying your Enterprise File Storage (EFS) volume through a private vRa
70
70
71
71
This association enables private networking between your Public Cloud instances and OVHcloud managed services such as EFS.
72
72
73
-
Follow the procedure described in [Step 1: Activating and managing a vRack](/pages/public_cloud/public_cloud_network_services/getting-started-07-creating-vrack)
73
+
Follow the procedure described in the **step 1: activating and managing a vRack** in our guide "[Configuring vRack for Public Cloud](/pages/public_cloud/public_cloud_network_services/getting-started-07-creating-vrack)".
74
74
75
75
### Step 2 - Create a Private Network in Your Public Cloud Project <aname="step2"></a>
76
76
77
77
To connect your Public Cloud instance to an EFS volume via vRack, first provision a dedicated private network within your project.
78
78
79
79
This isolated network enables secure communication between your instances and OVHcloud storage resources through the vRack architecture.
80
80
81
-
Follow the procedure described in [Step 2: Creating a private network in the vRack](/pages/public_cloud/public_cloud_network_services/getting-started-07-creating-vrack)
81
+
Follow the procedure described in the **step 2: creating a private network in the vRack** in our guide "[Configuring vRack for Public Cloud](/pages/public_cloud/public_cloud_network_services/getting-started-07-creating-vrack)".
82
82
83
83
### Step 3 — Launch the Instance on the Private Network
84
84
85
85
Deploy your Public Cloud instance within the private network you created. Ensure it is connected to the correct subnet to enable secure communication over the vRack.
86
86
87
-
Follow the procedure described in [Step 3: Integrating an instance into vRack](/pages/public_cloud/public_cloud_network_services/getting-started-07-creating-vrack)
87
+
Follow the procedure described in the **step 3: integrating an instance into vRack** in our guide "[Configuring vRack for Public Cloud](/pages/public_cloud/public_cloud_network_services/getting-started-07-creating-vrack)".
88
88
89
89
{.thumbnail}
90
90
91
-
Ensure the instance is assigned an IP address within the selected subnet (e.g., `10.235.0.15`).
92
-
93
-
Both methods achieve the same goal: securely connecting your EFS service to your vRack and Public Cloud instances.
91
+
Ensure that an IP address is assigned to the instance in the selected subnet (e.g. `10.235.0.15`).
94
92
95
93
### Step 4 - Create a vRack Service resource for EFS
96
94
97
95
There are two ways to create a vRack Service resource for your EFS volume.
98
96
99
-
/// details | a. Create via vRack Services
97
+
Both methods achieve the same goal: securely connecting your EFS service to your vRack and Public Cloud instances.
98
+
99
+
/// details | First method: creating via vRack Services
100
100
101
101
A vRack Service resource acts as a network adapter, connecting managed services like EFS to your vRack and its private subnet.
102
102
103
-
For detailed guidance, see OVHcloud’s official documentation: [vRack Services - Exposing a Managed Service on your vRack](/pages/network/vrack_services/global)
103
+
For detailed guidance, see OVHcloud’s official documentation: [vRack Services - Exposing a Managed Service on your vRack](/pages/network/vrack_services/global).
104
104
105
-
1. In the [OVHcloud Control Panel](/links/manager), navigate to `Network`{.action} section, go to`vRack Services`{.action}.
105
+
1. In the [OVHcloud Control Panel](/links/manager), navigate to `Network`{.action} section, then click on`vRack Services`{.action}.
106
106
107
107
2. Then click `Activate vRack Services`{.action}.
108
108
109
-
3. Select the same region as your vRack, Public Cloud instance, and EFS service. <spanid="step4-a-region-selection"></span>
3. Select the same region as your vRack, Public Cloud instance and EFS service. Then click `Activate vRack Services`{.action}. <spanid="step4-a-region-selection"></span>
112
110
113
111
4. Select `No thanks, i already have a vRack`{.action} and accept the terms and conditions to confirm.
114
112
115
-
5. Then, locate your newly created vRack Service in the list and click it.
5. Then, locate your newly created vRack Service in the list and click its name.
116
116
117
-
{.thumbnail}
117
+
{.thumbnail}
118
118
119
119
6. Edit the vRack Service with the following configuration:
120
120
121
-
- Private Network: Select the same vRack used for your Public Cloud project.
121
+
- Private Network: Select the same vRack used for your Public Cloud project.
122
122
123
-
{.thumbnail}
123
+
{.thumbnail}
124
124
125
-
- Create a subnet:
125
+
- Create a subnet:
126
126
127
-
{.thumbnail}
127
+
{.thumbnail}
128
128
129
-
> [!primary]
130
-
>
131
-
> Ensure the CIDR matches your Public Cloud private network.
132
-
>
129
+
> [!primary]
130
+
>
131
+
> Ensure the CIDR matches your Public Cloud private network.
132
+
>
133
133
134
-
1.Subnet CIDR: e.g.,`10.235.0.0/24`
135
-
2.Service Address Range: e.g.,`10.235.0.240/28`
136
-
- Reserved subset of the private subnet for assigning IPs to managed EFS services within the vRack.
137
-
3. VLAN: Use the same VLAN number as your Public Cloud private network (see [Step 2](#step2)).
138
-
4.Create
134
+
-Subnet address Range: e.g. `10.235.0.0/24`.
135
+
-Service address Range: e.g. `10.235.0.240/28`.
136
+
- Reserved subset of the private subnet for assigning IPs to managed EFS services within the vRack.
137
+
- VLAN: Use the same VLAN number as your Public Cloud private network (see [Step 2](#step2)).
138
+
- Click `Create subnet`{.action}.
139
139
140
-
- Create a Service endpoint:
140
+
- Create a Service Endpoint:
141
141
142
-
{.thumbnail}
142
+
{.thumbnail}
143
143
144
144
///
145
145
146
-
/// details | b. Create via Enterprise File Storage section
146
+
/// details | Second method: creating via Enterprise File Storage section
147
147
148
-
1. In the [OVHcloud Control Panel](/links/manager), navigate to the `Bare Metal Cloud`{.action} section. Go to `Strorage and backups`{.action}, `Enterprise File Storage`{.action}, then select your EFS service.
148
+
1. In the [OVHcloud Control Panel](/links/manager), navigate to the `Bare Metal Cloud`{.action} section. Click `Enterprise File Storage`{.action} under the heading **Storage and backups**, then select your EFS service.
4. If no vRack Service has been created yet, activate the vRack services and follow the [step 4a-3. Create via vRack Services](step4-a-region-selection)
156
+
4. If no vRack Services have been created yet, activate the vRack Services and follow the [first method: creation via vRack services](step4-a-region-selection) from the third point.
157
157
158
-
5. If you already created a vRack services, Select your dedicated service.
158
+
5. If you have already created a vRack service, select your dedicated service.
159
159
160
160
///
161
161
162
162
### Step 5 — Connect the EFS Volume to the vRack
163
163
164
164
Once the previous steps are completed successfully, all volumes created in your EFS service will automatically reside within your vRack and its dedicated subnet, making them immediately accessible to your Public Cloud instances.
165
165
166
-
### Step 6 — Configure Access Control (ACLs)
166
+
### Step 6 — Configure access control (ACLs)
167
167
168
-
In the Access Control tab of your EFS volume:
168
+
In the `Access Control List (ACL)`{.action} tab of your EFS volume:
169
169
170
170
- Add the IPs or CIDR ranges authorized to mount the volume:
171
171
172
-
- To allow a single instance: `10.235.0.15`
173
-
- To allow all instances within the subnet: `10.235.0.0/24`
172
+
- To allow a single instance, enter the instance's IP address, for example: `10.235.0.15`.
173
+
- To allow all instances within the subnet, enter the subnet address, for example: `10.235.0.0/24`.
174
174
175
-
- Set the desired Access Level: Read/Write or Read-only.
175
+
- Set the desired Access Level: **Read and write**or **Read-only**.
176
176
177
177
> [!primary]
178
178
>
@@ -189,21 +189,21 @@ ping <YOUR-EFS-SERVICE-IP>
189
189
190
190
1. Install the NFS client on your Public Cloud instance:
191
191
192
-
```bash
193
-
sudo apt install -y nfs-common
194
-
```
192
+
```bash
193
+
sudo apt install -y nfs-common
194
+
```
195
195
196
196
2. Mount the EFS volume:
197
197
198
-
```bash
199
-
sudo mkdir -p /mnt/efs
200
-
sudo mount -t nfs -o vers=3,timeo=600,retrans=2 <YOUR-EFS-SERVICE-IP>:/share_<ID> /mnt/efs
201
-
df -h /mnt/efs
202
-
```
198
+
```bash
199
+
sudo mkdir -p /mnt/efs
200
+
sudo mount -t nfs -o vers=3,timeo=600,retrans=2 <YOUR-EFS-SERVICE-IP>:/share_<ID> /mnt/efs
201
+
df -h /mnt/efs
202
+
```
203
203
204
-
### Step 8 — (Optional) Enable Automatic Mount on Boot
204
+
### Step 8 — Enable Automatic Mount on Boot (optional)
205
205
206
-
To ensure your EFS volume mounts automatically at startup, add the following entry to your`/etc/fstab` file:
206
+
To ensure your EFS volume mounts automatically at startup, add the following entry to the`/etc/fstab` file:
| mount.nfs: No route to host | Instance and EFS not in the same region, or wrong VLAN ID | Ensure the instance, EFS, and vRack Services are in the same region. Recreate the vRack Service using the same VLAN ID as the private network. |
232
-
| mount.nfs: access denied by server | EFS ACL missing or incorrect | Add the instance IP (e.g.,`10.235.0.x`) or subnet (e.g.,`10.235.0.0/24`) with protocol NFSv3 and Read/Write access. |
233
-
| mount command hangs indefinitely | Wrong NFS version or unresponsive endpoint | Use: `-o vers=3,timeo=600,retrans=2` to force NFSv3 and define timeouts. |
234
-
| mount succeeds but no read/write | ACLs or POSIX permissions too strict | Adjust ACLs or update volume-level permissions. |
235
-
| mount works, but not after reboot | Missing `/etc/fstab` entry | Add: `<YOUR-EFS-SERVICE-IP>:/share_<ID> /mnt/efs nfs vers=3,timeo=600,retrans=2 0 0`|
236
-
| vRack Services shows “Inactive” | Service not yet provisioned | Wait for provisioning to complete, or reattach the service from the EFS Private Network tab. |
231
+
| mount.nfs: No route to host | Instance and EFS not in the same region, or wrong VLAN ID.| Ensure the instance, EFS, and vRack Services are in the same region. Recreate the vRack Service using the same VLAN ID as the private network. |
232
+
| mount.nfs: access denied by server | EFS ACL missing or incorrect.| Add the instance IP (e.g. `10.235.0.x`) or subnet (e.g. `10.235.0.0/24`) with protocol NFSv3 and Read/Write access. |
233
+
| mount command hangs indefinitely | Wrong NFS version or unresponsive endpoint.| Use: `-o vers=3,timeo=600,retrans=2` to force NFSv3 and define timeouts. |
234
+
| mount succeeds but no read/write | ACLs or POSIX permissions too strict.| Adjust ACLs or update volume-level permissions. |
235
+
| mount works, but not after reboot | Missing `/etc/fstab` entry.| Add: `<YOUR-EFS-SERVICE-IP>:/share_<ID> /mnt/efs nfs vers=3,timeo=600,retrans=2 0 0`.|
236
+
| vRack Services shows “Inactive” | Service not yet provisioned.| Wait for provisioning to complete, or reattach the service from the EFS Private Network tab. |
237
237
238
238
## Go further
239
239
@@ -249,4 +249,4 @@ If no errors occur, the EFS volume will now automatically mount on boot.
249
249
250
250
If you need training or technical assistance to implement our solutions, contact your sales representative or click on [this link](/links/professional-services) to get a quote and ask our Professional Services experts for assisting you on your specific use case of your project.
0 commit comments