<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>If your network is secure then you could use something like tar
and netcat instead of ssh to avoid the crypto penalty.</p>
<p>I believe that rsync when run in server mode does not do
encryption.<br>
</p>
<br>
<div class="moz-cite-prefix">On 02/23/2018 10:30 AM, Alex Volkov via
talk wrote:<br>
</div>
<blockquote type="cite"
cite="mid:4cb0fdc2-f4cf-ac42-8887-06148c6ae950@gmail.com">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<div class="moz-cite-prefix">Hi Giles,<br>
<br>
My experience with NFS has been entirely different, for me it
was a simple fast system, that's faster than SAMBA and SSH, that
let me copy files over a network where the speed limitation
would be either hard drive throughput or a network card speed
(if it were 100Mbps link). From the replies above it looks like
NFSv4 is a completely different beast and it in your scenario it
wouldn't really make sense to use it over SSH, so I'm going to
discuss trade-offs of NFSv3 vs SSH.<br>
<br>
The limitations of Raspberry Pi is that it's got only 100Mbps
Ethernet port and that it's doesn't have a lot of hardware for
encryption compared to x86 CPU, you would be limited to about
2-3MBps transfer rate over SSH and you might be able to achieve
about 10-12MBps transfer rate over NFS. This is all depends on
how big the backup files are -- if they are about 20MB each than
there's no point in setting up NFS, if they are about 1GB each,
than what you can do is to encrypt the files using GPG on the
server where they are being backed up and then transfer them to
an unsecured NFS share on Raspberry Pi when they then would be
further processed and moved off the share.<br>
<br>
I'm assuming for Raspberry Pi you would use an external USB hard
drive for storage, you could also increase networks speed to
about 400Mbps if you use USB2 to Ethernet Gigabit network
adapter, which could be bought for about $20-$40.<br>
<br>
Alex.<br>
<br>
On 02/22/18 15:25, Giles Orr via talk wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAEnxSC6X=mOB73_+62_tq58gKL-atiYKLHqxagKQJUtfe+dSUw@mail.gmail.com">
<div dir="ltr">
<div>I used to use NFS back in 2000 - back when we still
thought unsecured local services were okay. And I loved it
- it was slow, but very useful. So I'd like to start using
it again, but I want it secured. Apparently NFSv4 "mandates
strong security" (according to Wikipedia): does that mean
for authentication, or encryption of files "in flight," or
both? And I keep seeing it mentioned with Kerberos: I've
been researching Kerberos a bit and that really looks like
something I'd rather NOT have to set up. Is it possible to
run NFSv4 without Kerberos? Pointers to recent, good
tutorials would also be deeply appreciated.<br>
<br>
</div>
I'm using Fedora 27 and Debian (stable or testing) on the
clients. You can stomp me if you like for my plan to use a
Raspberry Pi as the server - I'm not looking for speed as this
will mostly be for backups. I'd probably use Raspbian unless
there's a compelling reason to use one of the other Pi
distros. Of course if this will really need more memory than
the Pi has, that's another issue ...<br clear="all">
<div>
<div><br>
-- <br>
<div class="gmail_signature">Giles<br>
<a href="https://www.gilesorr.com/" target="_blank"
moz-do-not-send="true">https://www.gilesorr.com/</a><br>
<a href="mailto:gilesorr@gmail.com" target="_blank"
moz-do-not-send="true">gilesorr@gmail.com</a></div>
</div>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">---
Talk Mailing List
<a class="moz-txt-link-abbreviated" href="mailto:talk@gtalug.org" moz-do-not-send="true">talk@gtalug.org</a>
<a class="moz-txt-link-freetext" href="https://gtalug.org/mailman/listinfo/talk" moz-do-not-send="true">https://gtalug.org/mailman/listinfo/talk</a>
</pre>
</blockquote>
<p><br>
</p>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">---
Talk Mailing List
<a class="moz-txt-link-abbreviated" href="mailto:talk@gtalug.org">talk@gtalug.org</a>
<a class="moz-txt-link-freetext" href="https://gtalug.org/mailman/listinfo/talk">https://gtalug.org/mailman/listinfo/talk</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Alvin Starr || land: (905)513-7688
Netvel Inc. || Cell: (416)806-0133
<a class="moz-txt-link-abbreviated" href="mailto:alvin@netvel.net">alvin@netvel.net</a> ||
</pre>
</body>
</html>