RE: Re:

We get lots of questions about NFSv4, especially for the security and locking aspects.

The main issues people see with it are performance (especially with high metadata workloads) and complexity in setup.

It’s a stateful protocol, so it also sees disruption during failovers.

Mostly, people use it for the following reasons:


  *   Their business makes it a requirement for the security
  *   They have an application that requires it for the locking
  *   They want ACLs
  *   They only want to open up a single port over a firewall

If you just want it for ACLs, ONTAP allows you to set v4 ACLs and still use NFSv3:

https://whyistheinternetbroken.wordpress.com/2017/08/11/nfsv4acls-nfsv3mounts/

From: Toasters <[email protected]> On Behalf Of Sebastian P. Goetze
Sent: Friday, October 2, 2020 3:26 AM
To: Douglas Siggins <[email protected]>
Cc: Toasters <[email protected]>
Subject: Re:

NetApp Security WARNING: This is an external email. Do not click links or open attachments unless you recognize the sender and know the content is safe.


I teach NetApp and do have students once in a while using NFS v4, but usually only when necessary, e.g. routing through firewalls (which in my experience seems to be the #1 reason using v4). I did have people using pNFS in production, but that's rare.

Some are evaluating, though. Maybe when multipathing is supported (regular like VMware, not pNFS), there will be an uptick in adoption...

My 2c

Greetings from Northfriesland

Sebastian


sent from my mobile, spellchecker might have messed up...

On Thu, 1 Oct 2020, 02:33 Douglas Siggins <[email protected]<mailto:[email protected]>> wrote:
Yes, thanks folks. It appears there's not much v4 out there as suspected.



On Wed, Sep 30, 2020, 20:12 Jeff Cleverley via Toasters <[email protected]<mailto:[email protected]>> wrote:



---------- Forwarded message ----------
From: Jeff Cleverley <[email protected]<mailto:[email protected]>>
To: Wayne McCormick <[email protected]<mailto:[email protected]>>
Cc: Toasters <[email protected]<mailto:[email protected]>>
Bcc:
Date: Wed, 30 Sep 2020 18:03:42 -0600
Subject: Re: Any Openstack/Netapp FAS deployments w cinder NFS, v3 or v4
Wayne,

Just so you know your posts are working, I'll reply.  I have no experience with that at this point in time.  Personally I don't see an issue posting to ensure the NetApp configurations are correct or compatible with the configurations.

Jeff

On Fri, Sep 25, 2020 at 9:09 AM Wayne McCormick <[email protected]<mailto:[email protected]>> wrote:
I hope I’m doing this right… (posting to the list I mean).

I have four MySQL servers using NFSv4, but not with krb5.  The rest of the environment is v3.

We did do a pilot with OpenStack Container Platform and we used v3 (v4 was enabled, so it may have used it) provisioning via Trident with success.  We also used Trident to provision iSCSI volumes.  Worked quite well.

Hope that helps a little.

Wayne

From: Toasters <[email protected]<mailto:[email protected]>> On Behalf Of Douglas Siggins
Sent: Friday, September 25, 2020 9:01 AM
To: Toasters <[email protected]<mailto:[email protected]>>
Subject: Re: Any Openstack/Netapp FAS deployments w cinder NFS, v3 or v4


  CAUTION: This email is from an external source. Do not click links or open attachments unless you recognize the sender and know the content is safe.
Crickets ? :)

Alright let us remove openstack qualifier. Does anyone use v4 or know anyone that does with Netapp FAS?

On Tue, Sep 22, 2020 at 6:53 PM Douglas Siggins <[email protected]<mailto:[email protected]>> wrote:
Greetings,
Just reaching out for experiences on Openstack deployments with Netapp NFS.  Are you using the default v4 or have switched the mount options to v3? We have a pretty good base of ISCSI, but based on performance and manageability are considering making the jump.

Speaking of NFSv4, outside of openstack has anyone made any large deployments? Is it as solid as v3? using uid/gid, is anyone using sec=krb5?



Regards,
Douglas
_______________________________________________
Toasters mailing list
[email protected]<mailto:[email protected]>
https://www.teaparty.net/mailman/listinfo/toasters


--
** Please note my email address has changed to [email protected]<mailto:[email protected]>

Jeff Cleverley
Factory Systems Engineer
4380 Ziegler Road
Building 1, Dock 1
Fort Collins, Colorado 80525
970-288-4611



---------- Forwarded message ----------
From: Jeff Cleverley via Toasters <[email protected]<mailto:[email protected]>>
To: Wayne McCormick <[email protected]<mailto:[email protected]>>
Cc: Toasters <[email protected]<mailto:[email protected]>>
Bcc:
Date: Thu, 1 Oct 2020 01:04:02 +0100
Subject:
_______________________________________________
Toasters mailing list
[email protected]<mailto:[email protected]>
https://www.teaparty.net/mailman/listinfo/toasters
_______________________________________________
Toasters mailing list
[email protected]<mailto:[email protected]>
https://www.teaparty.net/mailman/listinfo/toasters

_______________________________________________
Toasters mailing list
[email protected]
https://www.teaparty.net/mailman/listinfo/toasters