4 ms·
"Thankfully, despite its age and total lack of security, NFS is still well supported under Linux." NFSv4 can run over TCP, which means that any encrypted wrapp
by chasil 2y ago
"Thankfully, despite its age and total lack of security, NFS is still well supported under Linux."
NFSv4 can run over TCP, which means that any encrypted wrapper can carry it. While SSH port forwarding can be used, stunnel is a better fit for batch environments. Wireguard is another option from this perspective.
Encrypted ONC RPC works at a lower level of the protocol to secure NFS, which is documented in RFC-9289.
Obviously, none of this will help with a machine using RARP and TFTP over 10baseT.
- DonHopkins 2y agoNFS originally stood for "No File Security". https://news.ycombinator.com/item?id=33384073 https://news.ycombinator.com/item?id=33384073 Speaking of YP (which I always thought sounded like a brand of moist baby poop towelettes), BSD, wildcard groups, SunRPC, and Sun's ingenuous networking and security and remote procedure call infrastructure, who remembers Jordan Hubbard's infamous rwall incident on March 31, 1987? https://news.ycombinator.com/item?id=31822138 https://news.ycombinator.com/item?id=31822138
- EvanAnderson 2y ago> NFS originally stood for "No File Security" I often heard a different "F" word in that acronym in place of "File".