[Beowulf] Building new cluster - estimate
Perry E. Metzger
perry at piermont.com
Wed Aug 6 12:44:23 PDT 2008
"Robert G. Brown" <rgb at phy.duke.edu> writes:
> Once upon a time, running NFS in a LAN that wasn't controlled at the
> port level was basically openly inviting anyone that could plug into a
> wired port to have open access to all exported files, and I'm not sure
> that has fundamentally changed as to change it would be very difficult.
NFSv4 changes the security situation a bunch, but it is not widely
implemented and deployed. One can also use IPSec with NFSv3 --
appropriate IPSec policies will assure that you get reasonable
security, at the price of some performance because of the crypto.
Perry E. Metzger perry at piermont.com
More information about the Beowulf