zlacker

> in-transit encryption with TLS

Last I checked it spawns a HAProxy on the client and points the in-kernel NFS client to this HAProxy on lo, is this still the case?

And, out of curiosity: now that EFS claims 600us average read latency, would the extra hop matter?

>>rfoo+(OP)
It currently uses stunnel to encrypt the connection — I only started it a couple of years ago but have never seen a reference to HAProxy.

>>rfoo+(OP)
The sibling comment is correct. The EFS mount helper starts up and manages an stunnel process. We have not seen a significant impact on latency from the stunnel process.