On Fri, Oct 29, 2021 at 10:56:24AM -0400, Steve Dickson wrote: > On 10/29/21 09:45, J. Bruce Fields wrote: > >Really, first I think we should try to identify what the problem is that > >we're trying to solve. > I'm not trying to solve any problem... I'm just trying to enable a > feature in a sane and safe way. By only have one module param it > is on all the time on all copies... With an export opt, admins > can pick and choose which exports use it. I'm thinking that > is a bit less risky. So, I'm not sure which risk you're thinking about. If it's the risk of the client telling the destination server to copy from a rogue server--I'm kind of regretting bringing that up. If there are bugs in that area, I'd rather they be fixed, than that we introduce new configuration to work around bugs that may or may not exist. They'd need to be fixed anyway, for other reasons. I think Dai has volunteered to look through the code that handles replies to the small number of operations concerned, and I think that's good enough due diligence. And I'm not getting the impression Trond is particularly worried about the client code here either. If the risk is performance--like I say, I'm not sure exactly what those cases look like. I've been thinking about it in terms of bandwidth, but maybe that's wrong--the bigger problem may be when the source server is only accessible to the client for some reason (like, you're copying from a local server to a destination server that's outside a firewall). Maybe the destination server will end up waiting a long time trying to reach the source. But, again, I'm not sure an export option helps, because I don't see why that problem would necessarily be per-destination-server-export. Instead, we may just need to make sure the destination server is quick to timeout, or has some mechanism to blacklist source servers so it's not repeatedly timing out trying to copy from the same server. I don't know, I'm just thinking out loud. > The option of setting the inter_copy_offload_enable is still > there... if admins want to go that route. Let's just stick with that for now, and leave it off by default until we're sure it's mature enough. Let's not introduce new configuration to work around problems that we haven't really analyzed yet. It's not as though turning on a module option is any more difficult than setting an export option. --b.
