News for hackers. Stuff that matters.

A comment on NFS: The Early Years. Parent comment

Re:NFS: The Early Years by rfoo on Tuesday June 21, 2022 @04:48PM (#31828948)
> in-transit encryption with TLS

Last I checked it spawns a HAProxy on the client and points the in-kernel NFS client to this HAProxy on lo, is this still the case?

And, out of curiosity: now that EFS claims 600us average read latency, would the extra hop matter?

[ Parent | on HN ]
Re:NFS: The Early Years by geertj on Tuesday June 21, 2022 @08:33PM (#31830708)
The sibling comment is correct. The EFS mount helper starts up and manages an stunnel process. We have not seen a significant impact on latency from the stunnel process.
[ Parent | on HN ]
Re:NFS: The Early Years by acdha on Tuesday June 21, 2022 @04:51PM (#31828980)
It currently uses stunnel to encrypt the connection — I only started it a couple of years ago but have never seen a reference to HAProxy.
[ Parent | on HN ]