Gluster users - Oct 2009 - GlusterFS Security Stunnel or alternative?

I'm using glusterfs 2.07 and I'm trying to secure it.  I'm using it
on a
switch that is connected to the internet.
I've tried using stunnel but it uses like 90% of CPU on both client and 
server.  It also reduces throughput by 3-4x.

Is there any better way or translator that will be available soon to 
secure and encrypt the connection, or is glusterfs really meant to be 
used only on a private internal switch?

Thanks guys

Jeffery Soo wrote:
> I'm using glusterfs 2.07 and I'm trying to secure it.  I'm
using it on a
> switch that is connected to the internet.
> I've tried using stunnel but it uses like 90% of CPU on both client and
> server.  It also reduces throughput by 3-4x.
> 
> Is there any better way or translator that will be available soon to 
> secure and encrypt the connection, or is glusterfs really meant to be 
> used only on a private internal switch?
I don't think there is any usable translator for that.

You can try running it over an IPsec or OpenVPN tunnel.

If you run glusterfs over internet, you might also consider enabling 
compression in the VPN tunnel; this could technically increase your 
throughput.


-- 
Tomasz Chmielewski
http://wpkg.org