Re: Cephfs over internet

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi,

On 5/21/24 13:39, Marcus wrote:
Thanks for your answers!
I read somewhere that a vpn would really have an impact on performance, so it was not recommended, and I found v2 protocol.
But vpn feels like the solution and you have to accept the lower speed.


Also keep in mind that clients have to be able to access all nodes of the cluster. You are not only exposing the ceph mons, but all ceph services.


Using VPN/tunnel is the minimal acceptable solution. Using a NFS/SMB gateway (and expose this gateway via tunnel/VPN + kerberos) should IMHO be a better solution security wise.


Regards,

Burkhard

_______________________________________________
ceph-users mailing list -- ceph-users@xxxxxxx
To unsubscribe send an email to ceph-users-leave@xxxxxxx



[Index of Archives]     [Information on CEPH]     [Linux Filesystem Development]     [Ceph Development]     [Ceph Large]     [Ceph Dev]     [Linux USB Development]     [Video for Linux]     [Linux Audio Users]     [Yosemite News]     [Linux Kernel]     [Linux SCSI]     [xfs]


  Powered by Linux