Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 25 Sep 2003 10:50:16 -0600
From:      "David G. Andersen" <danderse@cs.utah.edu>
To:        Robert Watson <rwatson@freebsd.org>
Cc:        freebsd-security@freebsd.org
Subject:   Re: unified authentication
Message-ID:  <20030925105016.C80664@cs.utah.edu>
In-Reply-To: <Pine.NEB.3.96L.1030925123616.50146N-100000@fledge.watson.org>; from rwatson@freebsd.org on Thu, Sep 25, 2003 at 12:37:13PM -0400
References:  <20030925100650.B80664@cs.utah.edu> <Pine.NEB.3.96L.1030925123616.50146N-100000@fledge.watson.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Robert Watson just mooed:
> > 
> >   http://www.fs.net/
> 
> And one of the very nice things about the SFS implementation is that it
> plugs into loop-back NFS on the client, so you don't need special kernel
> changes, which is what has made the OpenAFS and Arla stuff so difficult.
> On the other hand, there's presumably the expected observable performance
> difference...

It's suprisingly not bad.  The network and crypto are usually the limiting
factors.  From two machines in the same building going through one router:

SFS> /usr/bin/time dd if=/dev/zero of=foo bs=8k count=1k
8388608 bytes transferred in 1.677283 secs (5001308 bytes/sec)
        1.87 real         0.00 user         0.10 sys

>From a linux NFS client, same dd, same lan, no interposed router,
1.14 elapsed, 0.01 user, 0.02 system.  DM's eval suggests that
their performance for things like FreeBSD kernel compiles is 
is usually better than NFS over TCP, barely worse than NFS over
UDP, and 25%ish slower than the local filesystem.  In other words,
it's within the realm of the OK.  I don't like compiling with my
object trees over any remote filesystem, but I find keeping my
source tree on SFS to be about the same as keeping it on NFS.

The 'rex' authentication system they've built is pretty slick, but
has the downside that my fingers think "ssh" when I want to login...

  -Dave

-- 
work: dga@lcs.mit.edu                          me:  dga@pobox.com
      MIT Laboratory for Computer Science           http://www.angio.net/
      I do not accept unsolicited commercial email.  Do not spam me.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030925105016.C80664>