If your network is secure then you could use something like tar and
netcat instead of ssh to avoid the crypto penalty.
I believe that rsync when run in server mode does not do encryption.
On 02/23/2018 10:30 AM, Alex Volkov via talk wrote:
Hi Giles,
My experience with NFS has been entirely different, for me it was a
simple fast system, that's faster than SAMBA and SSH, that let me copy
files over a network where the speed limitation would be either hard
drive throughput or a network card speed (if it were 100Mbps link).
From the replies above it looks like NFSv4 is a completely different
beast and it in your scenario it wouldn't really make sense to use it
over SSH, so I'm going to discuss trade-offs of NFSv3 vs SSH.
The limitations of Raspberry Pi is that it's got only 100Mbps Ethernet
port and that it's doesn't have a lot of hardware for encryption
compared to x86 CPU, you would be limited to about 2-3MBps transfer
rate over SSH and you might be able to achieve about 10-12MBps
transfer rate over NFS. This is all depends on how big the backup
files are -- if they are about 20MB each than there's no point in
setting up NFS, if they are about 1GB each, than what you can do is to
encrypt the files using GPG on the server where they are being backed
up and then transfer them to an unsecured NFS share on Raspberry Pi
when they then would be further processed and moved off the share.
I'm assuming for Raspberry Pi you would use an external USB hard drive
for storage, you could also increase networks speed to about 400Mbps
if you use USB2 to Ethernet Gigabit network adapter, which could be
bought for about $20-$40.
Alex.
On 02/22/18 15:25, Giles Orr via talk wrote:
I used to use NFS back in 2000 - back when we still thought unsecured
local services were okay. And I loved it - it was slow, but very
useful. So I'd like to start using it again, but I want it secured.
Apparently NFSv4 "mandates strong security" (according to Wikipedia):
does that mean for authentication, or encryption of files "in
flight," or both? And I keep seeing it mentioned with Kerberos: I've
been researching Kerberos a bit and that really looks like something
I'd rather NOT have to set up. Is it possible to run NFSv4 without
Kerberos? Pointers to recent, good tutorials would also be deeply
appreciated.
I'm using Fedora 27 and Debian (stable or testing) on the clients.
You can stomp me if you like for my plan to use a Raspberry Pi as the
server - I'm not looking for speed as this will mostly be for
backups. I'd probably use Raspbian unless there's a compelling
reason to use one of the other Pi distros. Of course if this will
really need more memory than the Pi has, that's another issue ...
--
Giles
https://www.gilesorr.com/
[email protected] <mailto:[email protected]>
---
Talk Mailing List
[email protected]
https://gtalug.org/mailman/listinfo/talk
---
Talk Mailing List
[email protected]
https://gtalug.org/mailman/listinfo/talk
--
Alvin Starr || land: (905)513-7688
Netvel Inc. || Cell: (416)806-0133
[email protected] ||
---
Talk Mailing List
[email protected]
https://gtalug.org/mailman/listinfo/talk
