Re: rfe: NFS resvport/noresvport per-export options

Lionel Cons <[email protected]> Sat, 25 Jul 2026 19:05:57 +0200
Newsgroups gmane.os.freebsd.devel.hackers
Message-ID <CAPJSo4UBiDdd9Ka2=4-nHKoi6GcBODQEvcfxZZaFBwcy70ek3Q@mail.gmail.com>
On Mon, 15 Jun 2026 at 10:11, Lionel Cons <[email protected]> wrote:
>
> Followup thread to "ms-nfs41-client mount to FreeBSD 16.0 nfsd fails
> in VM with NAT"
>
> I would be preferable to have a resvport (and noresvport) export
> option on a per-export basis to choose whether mounts from UDP/TCP
> ports >= 1024 are allowed or not, overriding any kernel default.
>
> While it is desired to keep the current default, it might be useful to
> allow UDP/TCP ports on a per-export basis to make access from systems
> behind NAT (e.g. VMs) easier.
>
> This mirrors the same "resvport" export option as found in
> Solaris/Illumos, and the "insecure" export option as found in Linux.

I filed https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296550 for this.

Lionel