|
Hah, we the opposite problem. We have a resident FireWall Nazi,
who is involved when boxes go online. You practically have to have a court order to be able to open up
a port on any box/instance, no matter how restricted <grin> -wk On 1/19/2017 2:30 PM, Kevin Lemonnier
wrote:
On the newer versions, I was under the impression that NFS was deprecated in favor of Ganesha?Ah yes, I saw that Ganesha was available for debian now, still haven't had the time test that out. Looked interesting thoughIs that turned on by default?Don't know after that but I can tell you it is turned on by default on 3.7 and 3.8, I've used it a bunch for migrating across clusters quickly :) I just drop everything on the wan port and accept everything on the lan port, so I'm not really concerned by firewall anymore. But that's very dependent on the setup ofcourse, and it did take me months before realising anyone on the Internet could mess with our datas by just mounting the volume from anywhere. We've been insanely lucky no one has, I feel the "gluster shouldn't be used on internet so we don't care" way of choosing the defaults is very very dangerous, and should probably be written in big fat red letter in the doc. Maybe it is and I just missed it though, but I'm pretty sure I'm not the only one. |
_______________________________________________ Gluster-users mailing list Gluster-users@xxxxxxxxxxx http://lists.gluster.org/mailman/listinfo/gluster-users
