zlacker

[return to "NFS: The Early Years"]
1. reacha+F01[view] [source] 2022-06-21 07:34:30
>>chmayn+(OP)
An unpopular opinion, but NFS is super handy and useful in reliable private networks with centralised authentication. Sure, it has its downsides that are being worked on with newer versions of the protocol(4+) with addition complexity, but it sure is useful in closely controlled setups like for HPC clusters.

I ran a HPC cluster for an University, and relied upon good old NFSv3 for shared file storage(both home directories, and research datasets). In addition I also built out a big set of softwares compiled in one server and made available to the entire cluster via a read-only NFS mount point. The whole thing works so reliably without any hiccups whatsoever. To over some the limitations of authentication and authorisation with NFS storage, we use a centralised FreeIPA server that allows all machines in the cluster have the same UID/GID mapping everywhere.

As a cream on top, the storage we expose over NFS is ZFS, that integrates nicely with NFS.

Update 1: Yes, data security is a bit of an afterthought with NFS. As anybody in my network with physical access can mount my central storage to another server physically and access data as long as they can recreate UID/GID locally.. but, if I let someone to do this physically, I have bigger problems to deal with first.

◧◩
2. teddyh+B11[view] [source] 2022-06-21 07:42:29
>>reacha+F01
You can fix the network access problem by using IPsec.
[go to top]