azure - Azure 虚拟机上的事件 FTP

Question

我已在 Azure Windows Server 2012 虚拟机上的 IIS 8.0 中设置 FTP。

按照这篇文章 ( http://itq.nl/walkthrough-hosting-ftp-on-iis-7-5-a-windows-azure-vm-2/ ) 中的说明进行操作后，我已经能够使 FTP 在被动模式下正常工作，但在尝试从 FileZilla 以主动模式连接时失败。 FTP 客户端可以在主动模式下连接到服务器，但在尝试执行 LIST 命令时失败并显示超时错误消息。

我仔细修改了在 azure vm 中设置的 20 和 21 端点，不指向探测端口，并且 Windows 防火墙允许外部连接到 20 和 21 VM 端口。

我不明白为什么主动模式不起作用而被动模式工作正常。

我知道还有其他用户遇到了一些问题。

请问有人在azure VM中成功设置了事件ftp吗？

Answer 1

之前的回复不正确。 https://stackoverflow.com/a/20132312/5347085

我知道这一点是因为我广泛地与 Azure 支持人员合作。该问题与服务器无法连接到客户端无关，并且我的测试方法排除了客户端问题的可能性。

与 Azure 支持人员合作两周后，他们对问题的评估本质上是“主动模式 FTP 使用一系列大范围的随机端口作为从客户端到服务器的数据通道。您只能向 Azure VM 添加 150 个端点，因此您不可能添加所有这些端口并使 Active FTP 100% 运行。为此，您需要使用“实例级公共(public) IP”，并从本质上绕过端点机制，将您的虚拟机直接放在互联网上，并完全依赖 native 操作系统防火墙进行保护。

如果您必须在 Azure 上使用主动模式 FTP 并且可以将您的虚拟机放在公共(public) IP 上，他提供了以下链接:

https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-instance-level-public-ip/

更新:Azure 支持的官方回应:

Josh,

First of all thanks with your patience on this. As I mentioned in my last email I was working with our Technical Advisors which are Support Escalation Engineers on reproducing this environment in Azure. Our tests were configured using WS_FTP 7.7 (Your version 7.1) and WS_FTP 12 client as well as the Windows FTP client. The results of our testing were the same as you are experiencing. We were able to log in to the server, but we get the same Command Port/List failures.

As we discussed previously Active FTP uses a random port for the data plane on the client side. The server connects via 21 and 20, but the incoming port is a random ephemeral port. In Passive FTP, this can be defined and therefore endpoints can be created for each port you use for part of the data plane.

Based on our extensive testing yesterday I would not expect any other Active FTP solution to work. The escalation Engineer that assisted yesterday also discussed this with other members of his team and they have not seen any successful Active FTP deployments in Azure.

In conclusion, my initial thoughts have been confirmed with our testing and Active FTP will not work in the Azure environment at this time. We are always striving to improve Azure’s offering so this may be something that will work in the future as we continue to grow.

You will need to move to a passive FTP setup if you are going to host this FTP server in Azure.