Hey #linux#debian people: it’s occurring to me that #rclone might not actually be the best way to do what I’m doing. So: if you had two Debian servers on a vpn, both with 1 gig fiber links to the internet, in cities 100 km apart, how would you go about having shared filesystems between them? Right now I am using rclone mount with sftp. Is there a less janky way?

modulux reshared this.

in reply to 🇨🇦Samuel Proulx🇨🇦

Nah, NFS 4 is a MODERN protocol, unlike SMB for example which is much more janky. Real encrypted SMB only became a widespread thing less than 10 years ago or so.

What you want specifically is NFS 4 with Kerberos and either sec=krb5i or sec=krb5p

krb5p is suitable for direct over the internet sharing. krb5i is suitable if the NFS goes over VPN.
@modulux

in reply to 🇨🇦Samuel Proulx🇨🇦

Then krb5i, which ensures integrity of the info being sent back and forth but leaves that info in the clear (but inside the tunnel so still safe over the internet). I further use proto=tcp6 and ULA addresses because IPv6 is just easier to administer without all the NAT garbage
@modulux
in reply to Tom

@tripplehelix@quanin Thanks! I'll have to read through the options carefully, because I also want to know what happens if the network connection goes down for some reason. Does it silently unmount and then the ram server starts writing to its local disc and filling it up? Or do writes fail? Or do they get cached? Or what? What happens when I fix the network connection? Does it remount? Or stay broken? Or sync some cache somewhere? I now understand how this works with rclone and I don't like it LOL.
in reply to 🇨🇦Samuel Proulx🇨🇦

what kind of files?

I would consider syncthing as an option in some scenarios. It requires more disk space (files are synchronized) and potentially can have conflicts. But on the other hand, you can continue using files if the connection is broken, and latency is 0.

Otherwise sshfs or an sftp mount could be fine.

There are more sophisticated solutions, if you have very demanding requirements.

in reply to 🇨🇦Samuel Proulx🇨🇦

Thanks for the help, everyone! #NFS is the way to go, and a lot simpler than I thought. For anyone discovering this later, the guide I'm using is this one: github.com/zilexa/Homeserver/tree/master/Filesystems-guide/networkshares_HowTo-NFSv4.2 Credits to everyone for the suggestions, ideas, and assurance that this isn't going to be as hard as I thought it would be: @yo, @dlakelan, @tripplehelix, @quanin, @modulux,

reshared this