Comment on Homelab upgrade - "Modern" alternatives to NFS, SSHFS?
non_burglar@lemmy.world 1 week ago
Your workload just won’t see much difference with any of them, so take your pick.
NFS is old, but if you add security constraints, it works really well. If you want to tune for bandwidth, try iSCSI , bonus points if you get zfs-over-iSCSI working with tuned block size. This last one is blazing fast if you have zfs at each and you do Zfs snapshots.
Beyond that, you’re getting into very tuned SAN things, which people build their careers on, its a real rabbit hole.
possiblylinux127@lemmy.zip 1 week ago
NFS with security does harm performance. For raw throughput it is best to use no encryption. Instead, use physical security.
non_burglar@lemmy.world 1 week ago
I don’t know what you’re on about, I’m talking about segregating with vlans and firewall.
If you’re encrypting your San connection, your architecture is wrong.
possiblylinux127@lemmy.zip 1 week ago
That’s what I though you were saying
non_burglar@lemmy.world 1 week ago
Oh, OK. I should have elaborated.
Yes, agreed. It’s so difficult to secure NFS that it’s best to treat it like a local connection and just lock it right down, physically and logically.
When i can, I use iscsi, but tuned NFS is almost as fast. I have a much higher workload than op, and i still am unable to bottleneck.