Lustre 1.6 Operations Manual

11.2.2.3 Customized Flavor
In most situations, you do not need a customized flavor, a basic flavor is sufficient
for regular use. But to some extent, you can customize the flavor string. The flavor
string format is:
base_flavor[-bulk{nip}[:hash_alg[/cipher_alg]]]
Here are some examples of customized flavors:
plain-bulkn
Use plain on the RPC message (null protection), and no protection on the bulk
transfer.
krb5i-bulkn
Use krb5i on the RPC message, but do not protect the bulk transfer.
krb5p-bulki
Use krb5p on the RPC message, and protect data integrity of the bulk transfer.
krb5p-bulkp:sha512/aes256
Use krb5p on the RPC message, and protect data privacy of the bulk transfer by
algorithm SHA512 and AES256.
Currently, Lustre supports these bulk data cryptographic algorithms:
■
■
Hash:
■
■
■
■
■
adler32
crc32
md5
sha1 / sha256 / sha384 / sha512
wp256 / wp384 / wp512
Cipher:
■
■
■
■
arc4
aes128 / aes192 / aes256
cast128 / cast256
twofish128 / twofish256
Chapter 11 Kerberos 11-13