Comment on Homelab upgrade - "Modern" alternatives to NFS, SSHFS?
possiblylinux127@lemmy.zip 1 week agoNFS with security does harm performance. For raw throughput it is best to use no encryption. Instead, use physical security.
Comment on Homelab upgrade - "Modern" alternatives to NFS, SSHFS?
possiblylinux127@lemmy.zip 1 week agoNFS with security does harm performance. For raw throughput it is best to use no encryption. Instead, use physical security.
non_burglar@lemmy.world 1 week ago
I don’t know what you’re on about, I’m talking about segregating with vlans and firewall.
If you’re encrypting your San connection, your architecture is wrong.
possiblylinux127@lemmy.zip 1 week ago
That’s what I though you were saying
non_burglar@lemmy.world 1 week ago
Oh, OK. I should have elaborated.
Yes, agreed. It’s so difficult to secure NFS that it’s best to treat it like a local connection and just lock it right down, physically and logically.
When i can, I use iscsi, but tuned NFS is almost as fast. I have a much higher workload than op, and i still am unable to bottleneck.
possiblylinux127@lemmy.zip 1 week ago
Have you ever used NFS in a larger production environment? Many companies coming from VMware have expensive SAN systems and Proxmox doesn’t have great support for iscsi