Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 615
  • Last Modified:

NFS over linux server to another linux server

I have a server1 that is directly connect to another server2 with two nic cards.  The other nic on server2 is connected to the internet.  I would like to be able to connect nfs to the server1 from another server3 from the internet.  Since I can't mount nfs to nfs mount (I don't think there is a way?)  so I need another way.  I would like the most speed out of it I can since everything is on 100Mbit connections.

Can I setup port forwards with iptables on server2 to forward certain ports to server1?  if so can you should me an example.  NOTE:  I do know how to setup static ports in nfs.


Thank you.
0
W00dyW00d
Asked:
W00dyW00d
  • 3
  • 3
1 Solution
 
NotLogicalCommented:
Hi W00dyW00d,

There is a little ambiguity in your question: which is the client, which is the server? Is server1 a server and server3 a client? Does server2 expose any NFS mounts currently (or will it)?

Is your connection to the 'net via some sort of dedicated high-speed or do you have a cable modem (or some type of dynamic-based address)?

If you can provide a little more info, it will be easier to provide you a solution.

NFS to NFS is possible - but so dangerous, that it's not even worth considering!   =8^O

Thanks,

NotLogical
0
 
W00dyW00dAuthor Commented:
server1 (10.0.0.1 server with nfs mounts)
  connects to server2 eth1 (10.0.0.2)

server2 (10.0.0.2 server with nfs mounts)
   connects to server1 eth1 (10.0.0.1)
   connect to internet with eth0 (123.123.123.123)


server3 client for both nfs servers (321.321.321.321)
   currently connects to server2 with nfs mounts
   needs to connect to server1 with nfs mounts
0
 
arrkerr1024Commented:
How about putting OpenVPN on servers 2 and 3, and connect server 3 to the network that has server1 and 2 on it.  That'll give you a nice, encrypted tunnel, with full access in both directions.
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
W00dyW00dAuthor Commented:
Well that is interesting idea.  I was also thinking of ssh tunnel.  How would speed be when moving files sizing around 100MB to 1GB over vpn.  The line is 100Mbit between the server2 and server3 (client).

Thank you for the help.
0
 
arrkerr1024Commented:
SSH would be fine if you just want nfs access occasionally, and you are able to log in manually each time and establish the ssh tunnel.  Certainly the easiest thing to do.

OpenVPN or any VPN for that matter is better if you want a permanent tunnel between two networks, especially if you want to use more than one service.  With the VPN you could allow a while network behind server3 to access server1 if you wanted.  Might be over-kill for your scenario - thats up to you.

Performance  is hard to tell.  The machines are certainly going to have to do some work to encrypt the data.  If the CPUs are fast, then it wouldn't be too bad.  If they are slow it might really slow you down.  Any modern CPU should be fine.  It is really going to depend on your internet connection between server1 and server3.  Residential lines are usually faster in one direction (downstream), so it would also matter what direction traffic is flowing.

Hope that helps...
0
 
arrkerr1024Commented:
Here's a good link on tunneling nfs over ssh - I'm sure  you found it too with some quick googling.
http://blogs.sun.com/shepler/entry/tunneling_nfs_traffic_via_ssh
0
 
W00dyW00dAuthor Commented:
Okay thank you for the great replies.  I'm try to set it up over the weekend.  I'm going to leave this question open just in case i have questions.

Thanks
0

Featured Post

Who's Defending Your Organization from Threats?

Protecting against advanced threats requires an IT dream team – a well-oiled machine of people and solutions working together to defend your organization. Download our resource kit today to learn more about the tools you need to build you IT Dream Team!

  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now