Don't give untrusted users access to CephFS directly, they can ruin your day. For example, quotas are enforced client-side and there isn't a good way to limit IOPS.
Paul -- Paul Emmerich Looking for help with your Ceph cluster? Contact us at https://croit.io croit GmbH Freseniusstr. 31h 81247 München www.croit.io Tel: +49 89 1896585 90 On Mon, Oct 7, 2019 at 1:07 PM Jaan Vaks <jaan.v...@elastx.se> wrote: > > Hi all, > > I'm evaluation cephfs to serve our business as a file share that span across > our 3 datacenters. One concern that I have is that when using cephfs and > OpenStack Manila is that all guest vms needs access to the public storage > net. This to me feels like a security concern. I've seen one suggestion is to > put NFS gateways in between to prevent this, I would prefer not having to use > NFS. Is there another way to solve this or is this a no concern to others, > both the network and NFS? We are a small cloud provider and having different > customers exposed to each other on the same storage net seems risky to me. > > Regards > Jaan > _______________________________________________ > ceph-users mailing list -- ceph-users@ceph.io > To unsubscribe send an email to ceph-users-le...@ceph.io _______________________________________________ ceph-users mailing list -- ceph-users@ceph.io To unsubscribe send an email to ceph-users-le...@ceph.io
