23.07.2014 Views

Lustre 1.6 Operations Manual

Lustre 1.6 Operations Manual

Lustre 1.6 Operations Manual

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Basic Flavor<br />

Authentication<br />

RPC Message<br />

Protection<br />

Bulk Data<br />

Protection<br />

Remarks<br />

krb5a GSS/Kerberos5 partial<br />

integrity<br />

checksum<br />

(adler32)<br />

krb5i GSS/Kerberos5 integrity integrity<br />

[sha1]<br />

krb5p GSS/Kerberos5 privacy privacy<br />

[sha1/aes128]<br />

Only the header of the RPC<br />

message is integrity<br />

protected, adler32<br />

checksum protection of<br />

bulk data, more<br />

performance overhead<br />

compared to krb5n.<br />

RPC message integrity<br />

protection algorithm is<br />

determined by actual<br />

Kerberos algorithms in use;<br />

heavy performance<br />

overhead.<br />

RPC message privacy<br />

protection algorithm is<br />

determined by actual<br />

Kerberos algorithms in use;<br />

heaviest performance<br />

overhead.<br />

* In <strong>Lustre</strong> <strong>1.6</strong>.5, bulk data checksumming is enabled (by default) to provide integrity checking using the adler32<br />

mechanism if the OSTs support it. Adler32 checksums offer lower CPU overhead than CRC32.<br />

11.2.2.2 Security Flavor<br />

A security flavor is a string that describes what kind of security transform is<br />

performed on a given PTLRPC connection. It covers two parts of messages, the RPC<br />

message and BULK data. You can set either part in one of the following modes:<br />

■<br />

■<br />

■<br />

null – No protection<br />

integrity – Data integrity protection (checksum or signature)<br />

privacy – Data privacy protection (encryption)<br />

11-12 <strong>Lustre</strong> <strong>1.6</strong> <strong>Operations</strong> <strong>Manual</strong> • September 2008

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!