SMB over QUIC

In the Ultra Transcenders books

AZ-802

Each book explains SMB over QUIC in context, with comparison tables and the common traps.

Terms in this definition

• SMB

  Protocol for Windows file shares, used by Azure Files and supporting authentication based on identity.

• QUIC

  Browsers often try this UDP-based protocol on port 443 first, but Microsoft Entra Internet Access can't tunnel it. Switching it off in the browser forces a fallback to ordinary HTTPS over TCP.

• UDP

  A transport protocol that sends data without establishing a connection.

• TLS

  Transport Layer Security, the encryption protocol for traffic like HTTPS and Bastion sessions over port 443. On a storage account, minimumTlsVersion fixes the oldest accepted version without opening any network access.

• VPN

  Traffic sent through an encrypted tunnel across a public network, as in a site-to-site connection to a VPN gateway in an Azure GatewaySubnet.

• Datacenter

  A building packed with racked servers that has its own electricity supply, cooling and network links. Microsoft gathers these buildings into Azure regions, and as a customer you pick the region, never which building your resources land in.

• Windows Server 2022 Datacenter: Azure Edition

  Runs only as a VM and is optimised for Azure, adding Hotpatch, SMB over QUIC and Extended Network. For the Azure appliance, the Extended Network wizard lists this edition alone.

Related terms

• Datacenter: Azure Edition

  Edition of Windows Server limited to Azure and Azure Local, with extras like SMB over QUIC and hotpatching switched on by default.

• EKU

  Enhanced Key Usage, a certificate extension that lists what the certificate may be used for, for instance Server Authentication on the certificate an SMB over QUIC server presents.

• KDC Proxy

  Lets SMB over QUIC clients away from the corporate network still obtain Kerberos tickets, by tunnelling their requests through HTTPS.