2 ms·
> in-transit encryption with TLS Last I checked it spawns a HAProxy on the client and points the in-kernel NFS client to this HAProxy on lo, is this still the
by rfoo 4y ago
> in-transit encryption with TLS
Last I checked it spawns a HAProxy on the client and points the in-kernel NFS client to this HAProxy on lo, is this still the case?
And, out of curiosity: now that EFS claims 600us average read latency, would the extra hop matter?
- acdha 4y agoIt currently uses stunnel to encrypt the connection — I only started it a couple of years ago but have never seen a reference to HAProxy.
- geertj 4y agoThe sibling comment is correct. The EFS mount helper starts up and manages an stunnel process. We have not seen a significant impact on latency from the stunnel process.