setting up nfs

[Jack at coats.org (Jack Coats)]

absolutely.  The net we used was not connected to the outside, and there
were vlan's set up between each client machine to the netapp.

For total security, use direct attached media only.  San is next,
and NAS (network attached storage) is the least secure.  But both
SAN and NAS can be hardened.  For total security, networks are bad
answers, we just don't have a way around them.

-----Original Message-----
From: owner-discuss at Blu.Org [mailto:owner-discuss at Blu.Org]On Behalf Of
Derek Atkins
Sent: Thursday, July 26, 2001 6:55 PM
To: Jack Coats
Cc: discuss at Blu.Org
Subject: Re: setting up nfs


Yea, except neither NFS nor CIFS provides any level of
network security.  Be sure your NetApp is behind a VERY
good firewall!

-derek

"Jack Coats" <Jack at coats.org> writes:

> Even though Network Appliance is high $$ equipment, they have some
> good white papers available on their web site about NFS and CIFS
> I/O of various kinds.  Even some 'benchmarks' that compare raw I/O
> to their NFS mounted I/O using their WAFFLE file system (internal
> to Netapp use only, it looks 'normal' to the outside world).
>
> -----Original Message-----
> From: owner-discuss at Blu.Org [mailto:owner-discuss at Blu.Org]On Behalf Of
> Joel Gwynn
> Sent: Thursday, July 26, 2001 4:00 PM
> To: discuss at Blu.Org
> Subject: Re: setting up nfs
>
>
> Thanks for all the educational responses.  I get it, I get it.  I'm
> looking into
> openafs.
>
> Jerry Feldman wrote:
>
> > I would have thought that it would even be longer. Assuming your
host
> > provider's LAN was 100Mbps, and T1 is 1.5Mbps.
> > But, not only are you bottolenecking the diskio, you are throwing
> > significant additional traffic onto the slower line which affects
> other users
> > of that line.
> >
> > When properly configured and managed, NFS (or more generically a
> > network file system) can be very efficient. Your file server itself
> should
> > have relatively fast drives and relatively low use for other
purposes.
> Users
> > should be spread around different subnets, but the server should
have
> > multiple NICs such that network disk I/O does not cross routers.
> >
> > On 26 Jul 2001, at 11:26, Scott Lanning wrote:
> >
> > > At work, our host provider temporarily switched a development
> machine
> > > to use NFS over a T1, and as a result MySQL queries would take 10
> > > times longer than usual (or longer). And when trying to list
> > > directories, it would occasionally give NFS errors indicating
> > > that NFS wasn't responding.
> >
> > Jerry Feldman <gaf at blu.org>
> > Associate Director
> > Boston Linux and Unix user group
> > http://www.blu.org
> > -
> > Subcription/unsubscription/info requests: send e-mail with
> > "subscribe", "unsubscribe", or "info" on the first line of the
> > message body to discuss-request at blu.org (Subject line is ignored).
>
> --
> ========[Joel-Gwynn]-[joelman at joelman.com]=======
> A train station is where a train stops.
> A bus station is where a bus stops.
> So now you know why they call this a workstation.
>
>
>
> -
> Subcription/unsubscription/info requests: send e-mail with
> "subscribe", "unsubscribe", or "info" on the first line of the
> message body to discuss-request at blu.org (Subject line is ignored).
>
> -
> Subcription/unsubscription/info requests: send e-mail with
> "subscribe", "unsubscribe", or "info" on the first line of the
> message body to discuss-request at blu.org (Subject line is ignored).

--
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       warlord at MIT.EDU                        PGP key available
-
Subcription/unsubscription/info requests: send e-mail with
"subscribe", "unsubscribe", or "info" on the first line of the
message body to discuss-request at blu.org (Subject line is ignored).

-
Subcription/unsubscription/info requests: send e-mail with
"subscribe", "unsubscribe", or "info" on the first line of the
message body to discuss-request at blu.org (Subject line is ignored).