Re: unified authentication

From: David G. Andersen (danderse_at_cs.utah.edu)
Date: 09/25/03

  • Next message: Matthew George: "Re: unified authentication"
    Date: Thu, 25 Sep 2003 10:50:16 -0600
    To: Robert Watson <rwatson@freebsd.org>
    
    

    Robert Watson just mooed:
    > >
    > > http://www.fs.net/
    >
    > And one of the very nice things about the SFS implementation is that it
    > plugs into loop-back NFS on the client, so you don't need special kernel
    > changes, which is what has made the OpenAFS and Arla stuff so difficult.
    > On the other hand, there's presumably the expected observable performance
    > difference...

    It's suprisingly not bad. The network and crypto are usually the limiting
    factors. From two machines in the same building going through one router:

    SFS> /usr/bin/time dd if=/dev/zero of=foo bs=8k count=1k
    8388608 bytes transferred in 1.677283 secs (5001308 bytes/sec)
            1.87 real 0.00 user 0.10 sys

    >From a linux NFS client, same dd, same lan, no interposed router,
    1.14 elapsed, 0.01 user, 0.02 system. DM's eval suggests that
    their performance for things like FreeBSD kernel compiles is
    is usually better than NFS over TCP, barely worse than NFS over
    UDP, and 25%ish slower than the local filesystem. In other words,
    it's within the realm of the OK. I don't like compiling with my
    object trees over any remote filesystem, but I find keeping my
    source tree on SFS to be about the same as keeping it on NFS.

    The 'rex' authentication system they've built is pretty slick, but
    has the downside that my fingers think "ssh" when I want to login...

      -Dave

    -- 
    work: dga@lcs.mit.edu                          me:  dga@pobox.com
          MIT Laboratory for Computer Science           http://www.angio.net/
          I do not accept unsolicited commercial email.  Do not spam me.
    _______________________________________________
    freebsd-security@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-security
    To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
    

  • Next message: Matthew George: "Re: unified authentication"

    Relevant Pages

    • Re: 2.6.0-test1 NFS file transfer
      ... > I cannot transfer files larger than 914 mb from an NFS mounted ... > filesystem to a local filesystem. ... I noticed on 2.6.0-test1 that mounting a server using the userspace nfs ... send the line "unsubscribe linux-kernel" in ...
      (Linux-Kernel)
    • Re: NIM AIX433 LppSource Creation Failure
      ... I could not get it to work from disk. ... I tried NFS source to create my lppsource and I tried even a local filesystem source to create my lppsource. ... Try the all-new Yahoo! ...
      (AIX-L)
    • Re: KMail - can I collect mail from machine on LAN?
      ... >> which would allow a remote address to appear to be local? ... > filesystems to appear as part of the local filesystem. ... I have used NFS ... > I think there is a configuration setting in KMail to allow it to use ...
      (Fedora)
    • Re: rm * painfully slow
      ... > TIA, ... Is it local filesystem or NFS? ... Try a truss -p on the rm process, ...
      (comp.unix.solaris)
    • Re: rm * painfully slow
      ... > Is it local filesystem or NFS? ... I did a comparison using local disks for each, no NFS. ... No...unfortunately I'm not the sysadmin. ...
      (comp.unix.solaris)