Re: Secure NFS

[Rick Stevens <rstevens vitalstream com>]

Waldher, Travis R wrote:
> Using Secure NFS (secure option in exports), are all transmissions DES
> encrypted?

Nope.  "secure" simply means that all requests for connections must
_originate_ from the client on a privileged port (<1024).  It does not
provide encryption.

> Basically, I'm looking for something to encrypt the data transmission
> from an NFS client to an NFS Server.

Theoretically, ssh can do that but I've never tried it.  As far as
the normal NFS suite is concerned, no encryption mechanism is available.
Remember, NFS is a file system.  Encrypting and decrypting activities
will slow it down quite a bit.  It might even make it somewhat unusable.
----------------------------------------------------------------------
- Rick Stevens, Senior Systems Engineer     rstevens vitalstream com -
- VitalStream, Inc.                       http://www.vitalstream.com -
-                                                                    -
-      "Microsoft is a cross between The Borg and the Ferengi.       -
-  Unfortunately they use Borg to do their marketing and Ferengi to  -
-               do their programming."  -- Simon Slavin              -
----------------------------------------------------------------------