In 2018, I wrote an article on pushing NFSv4 through stunnel, resulting in NFS over TLS. Emails between NFS kernel developers indicate that this is much faster

In 2018, I wrote an article on pushing NFSv4 through stunnel, resulting in NFS over TLS. Emails between NFS kernel developers indicate that this is much faster than Kerberos, and the RSA key setup that I published was adopted in RFC-9289 (which I assume also addresses the performance issue). https://www.linuxjournal.com/content/encrypting-nfsv4-stunnel-tls https://www.linuxjournal.com/content/encrypting-nfsv4-stunne... Edit: Some time after I published, one of the RFC authors outlined the NFS architectural changes in a blog post. https://blogs.oracle.com/linux/post/encrypting-nfs-data-on-the-wire https://blogs.oracle.com/linux/post/encrypting-nfs-data-on-t...