Blog Post

Storage at Microsoft
1 MIN READ

SMB over QUIC is now in public preview!

NedPyle's avatar
NedPyle
Bronze Contributor
Jun 24, 2021

Update: it GA'ed in 2022. Go use it in production! 🙂

 

Heya folks, Ned here again. Today I announced the new SMB over QUIC feature for Windows Server 2022 Datacenter: Azure Edition and Windows Insider at the Windows Server 2022, Best on Azure webinar. If you want to cut right to the chase, head to SMB over QUIC (PREVIEW) on Docs.

 

SMB over QUIC (Preview) offers an "SMB VPN" for telecommuters, mobile device users, and high security organizations. The server certificate creates a TLS 1.3-encrypted tunnel over the internet-friendly UDP port 443 instead of TCP/445. All SMB traffic, including authentication and authorization within the tunnel is never exposed to the network. Inside that tunnel, SMB behaves totally normally with all its usual capabilities.

 

Here's a demo of turning on the SMB over QUIC feature & using it. 

 

 

To learn more about SMB over QUIC, see demos, and try it out for yourself, head over SMB over QUIC (PREVIEW) on Docs! 

 

- Ned "quick!" Pyle

Updated Nov 07, 2022
Version 3.0

27 Comments

Show More
  • NedPyle's avatar
    NedPyle
    Bronze Contributor
    Jun 28, 2021

    Hi Dutch2005nl. Yes, as long as it will forward the UDP/443 (and TCP 443 Kerberos KDC Proxy) traffic to the file server, anything - reverse proxy, NAT, etc - should work.

  • Dutch2005nl's avatar
    Dutch2005nl
    Copper Contributor
    Jun 27, 2021

    Since it goes trough 443, for security reasons would one want/need/be able to use a reverse proxy to get this to work?

     

     

  • NedPyle's avatar
    NedPyle
    Bronze Contributor
    Jun 25, 2021

    evon3 if I had an answer for how long, I promise I'd tell you. 🙂 All I can say is that it's definitely planned by the Azure Files team, I just don't have a date yet.

  • evon3's avatar
    evon3
    Copper Contributor
    Jun 25, 2021

    Will it be long for SMB over Quic to be supported in Azure Files?

  • NedPyle's avatar
    NedPyle
    Bronze Contributor
    Jun 25, 2021

    mperrotta I cannot make specific 3rd party recommendations but I am pretty sure Azure Sentinel has these options and lots of folks who want to sell you things 😄 

  • mperrotta's avatar
    mperrotta
    Brass Contributor
    Jun 25, 2021

    Thanks for sharing NedPyle. Is there a recommended intrusion prevention system that can be used here?