Secure NFS

Rick Stevens rstevens at vitalstream.com
Tue Jan 4 19:48:32 UTC 2005


Waldher, Travis R wrote:
> Using Secure NFS (secure option in exports), are all transmissions DES
> encrypted?

Nope.  "secure" simply means that all requests for connections must
_originate_ from the client on a privileged port (<1024).  It does not
provide encryption.

> Basically, I'm looking for something to encrypt the data transmission
> from an NFS client to an NFS Server.

Theoretically, ssh can do that but I've never tried it.  As far as
the normal NFS suite is concerned, no encryption mechanism is available.
Remember, NFS is a file system.  Encrypting and decrypting activities
will slow it down quite a bit.  It might even make it somewhat unusable.
----------------------------------------------------------------------
- Rick Stevens, Senior Systems Engineer     rstevens at vitalstream.com -
- VitalStream, Inc.                       http://www.vitalstream.com -
-                                                                    -
-      "Microsoft is a cross between The Borg and the Ferengi.       -
-  Unfortunately they use Borg to do their marketing and Ferengi to  -
-               do their programming."  -- Simon Slavin              -
----------------------------------------------------------------------




More information about the Redhat-install-list mailing list