[0/3] POHMELFS high performance network filesystem. Strong crypto support.

From: Evgeniy Polyakov
Date: Mon Jul 07 2008 - 14:16:33 EST


Subject should be "POHMELFS high performance network filesystem. Strong
crypto support."

This release brings ability to encrypt data channel in case of
distributed filesystem created on top of uncontrolled channels.

One can setup different crypto algorithms, which will be autoconfigured
at mount time (depending on options it will or will not fail, if server
does not support requested algorithms, if administrator requested not to
fail, system will disable appropriate algorithm usage).

IOzone performance testing showed performance drop in case of
cbc(aes)+sha1 crypto operations, but system still behaves faster than
plain in-kernel async NFS. Nice picture in attach (or via link at:
http://tservice.net.ru/~s0mbre/blog/devel/fs/2008_07_07.html)

Plain read/write performance link:
http://tservice.net.ru/~s0mbre/blog/devel/fs/2008_06_25.html

--
Evgeniy Polyakov

Attachment: pohmelfs_sncrypted_vs_plain_async_nfs.png
Description: PNG image