Subject should be "POHMELFS high performance network filesystem. Strong crypto support." This release brings ability to encrypt data channel in case of distributed filesystem created on top of uncontrolled channels. One can setup different crypto algorithms, which will be autoconfigured at mount time (depending on options it will or will not fail, if server does not support requested algorithms, if administrator requested not to fail, system will disable appropriate algorithm usage). IOzone performance testing showed performance drop in case of cbc(aes)+sha1 crypto operations, but system still behaves faster than plain in-kernel async NFS. Nice picture in attach (or via link at: http://tservice.net.ru/~s0mbre/blog/devel/fs/2008_07_07.html) Plain read/write performance link: http://tservice.net.ru/~s0mbre/blog/devel/fs/2008_06_25.html -- Evgeniy Polyakov
Attachment:
pohmelfs_sncrypted_vs_plain_async_nfs.png
Description: PNG image
