Received-SPF: pass (google.com: domain of linux-nfs+bounces-971-linux.lists.archive=gmail.com@vger.kernel.org designates 139.178.88.99 as permitted sender) client-ip=139.178.88.99;
Date: Mon, 8 Jan 2024 09:39:41 -0500
From: Chuck Lever <chuck.lever@oracle.com>
To: Cedric Blancher <cedric.blancher@gmail.com>
Cc: Linux NFS Mailing List <linux-nfs@vger.kernel.org>
Subject: Re: nfs-utils&nfsd&autofs not supporting non-2049 TCP port numbers -
 Fwd: showmount -e with custom port number?
Message-ID: <ZZwJLb7j65QXR1+K@tissot.1015granger.net>
References: <CALXu0UdFR7Xn51eKFUUi6a68wvDKc-RXz7F4LKyQgDptqfYbgw@mail.gmail.com>
 <CALXu0UfSJ0Qc3HOecf4pQ=VnEVqxRw6OGzNwhh9BUVYaHV7_oQ@mail.gmail.com>
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <CALXu0UfSJ0Qc3HOecf4pQ=VnEVqxRw6OGzNwhh9BUVYaHV7_oQ@mail.gmail.com>
Precedence: bulk
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: 
	=?us-ascii?Q?LDNkpr6cF2/zVzK3UsuFuVppy1U+/eDvGef/m5Ur+EY3v1dhZ9neo33+Zs8Y?=
 =?us-ascii?Q?lGrZUVaXyvJRJP4PfgPP9drCLyAQ7H+l+iMFSWwR1bFqib6UMB39DElfXJN2?=
 =?us-ascii?Q?jyFjZx8SPmCpMiQMtsMh00kd7KTfWUHaDnFeHFMxFP75MfgNNvFZVmK0Bnce?=
 =?us-ascii?Q?PNRYJtP1PIoDw8cSKVePUv3S/t+ytXUdiOs3k9vPwhaIlXkCIu/Xakk0Ybov?=
 =?us-ascii?Q?HZ/X5pQYqviltOm0ZhUCgf077U6AM69OOoCnXzcubNXE43H56QCjqwigjXMy?=
 =?us-ascii?Q?g9bW1yCMQ1Q63Ad0Tx8f6qlggsade+dbbKweJr6Wuhh+6LAqeuiSovGVcFH/?=
 =?us-ascii?Q?ZngZHxGSmlFEgtHbnpSWFjrsXQ9H+c5xnkyVIVSlWmV88iNwJ+rg3y1PtJ2S?=
 =?us-ascii?Q?LjzD12uKC8VrXJ5OsphgdVzqdcRkSLbnacxAEL3jlavFzduUwutHfBLPBX4z?=
 =?us-ascii?Q?DMfSELuxMgfDNDhO/JNYKi0llbo8T4vwPeMqEWkLmS7EhFprjOje0XkC1VF6?=
 =?us-ascii?Q?8OTb6pOdjAQ3V1S+VMuPtQutR5bnn3A8/gZqrOxsIvUkcrVm5YAwLaqxQSrK?=
 =?us-ascii?Q?jOgJ0ssIU3cRbxTib9CdB6FTMvG1AZrAAV43FzIrIjnon0tk1pgku7P9fa1+?=
 =?us-ascii?Q?Bbk+1ekoj3J5jJ2KmeD1x4rFrPLzbn830iELIzI0ktICcwqEQxk2Z7INTjAT?=
 =?us-ascii?Q?nzmHpkS68NEJ3SF7aA7DuycNTWyk4677mOlHiNdlDibLsP5/A/1jvHfVKDYi?=
 =?us-ascii?Q?NiRtqTpyShMrj7O53/LinqKnyMvw7UEia2P0zN7iKX1Yg6j6yTc96ZodsTAZ?=
 =?us-ascii?Q?Sb1b7H+vhrFs2yIn5QGiqbyUv1WosmY3RPRlhL6tfjLtweLMP8xvx2VeOBH9?=
 =?us-ascii?Q?TTmvvJMvpAYihVx5O8bKrSaWJJ7w375WOWW6a/AN7aOUDeW0qamS63p8jOi4?=
 =?us-ascii?Q?2Vg0noo5VgPqOMsRX6+baZ/XvEIzGsolWgxL0XNyysnlVACvLybKk6qkzHPg?=
 =?us-ascii?Q?5cSgPA7gno/PbsXn/qqesk3eqbwE4AG1k5YhW8DqO9zwE1JTw72YPoZhcyIp?=
 =?us-ascii?Q?1RW2G7eE9s/BlNFdCk7eLagRqWa7CMLcT9GAgwYTJCYJL3LajXR+dALZt5l0?=
 =?us-ascii?Q?j7QSB67DEeaLMZMf020lfTNCNGA/Vh4mC4EXSe2kbFW1vfj3XBSQo/DHoeLl?=
 =?us-ascii?Q?Q6hoi3S7VIoyNBJdhAUUSTttGggjk9Oez1idQsp4th8FuXD/UdK8pD4uLSnI?=
 =?us-ascii?Q?Vt/sGSgelbwaJJCIhx9tRxfI5V7utzumBws7dHwVXYJ7xloyRhshDBHiLryT?=
 =?us-ascii?Q?Qcp++o4iwDa3/4Vz9p4MUrFV3dQyoFf7PZMexCab2XWlxx+Juo08wz36W5hH?=
 =?us-ascii?Q?+cp+EWfnNHaQ0Otj1mNxshncuFZ+JwP0WKFMBVpVgRMgjsYfbaSrD/F2Z0PK?=
 =?us-ascii?Q?AeRH9ZCrBoG8hPAHQHEJzEUb3hTDfVu4j47fkfn/FtkUYhC1OFkkKdjh0r52?=
 =?us-ascii?Q?urzvNRw6KQ3X8eaifRNOyB8lS2NWG36sahnKFHhs3Oa929rPmZVgsXpB7jVW?=
 =?us-ascii?Q?TmOUqfktOIkZfplILP/jsfax+5YPeX15VjUd/Fvn40mheqoOk9HMau3tl8E7?=
 =?us-ascii?Q?fw=3D=3D?=
X-MS-Exchange-AntiSpam-ExternalHop-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-ExternalHop-MessageData-0: 
	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
X-OriginatorOrg: oracle.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 5d2d0233-6552-48e2-4296-08dc1057a77c
X-MS-Exchange-CrossTenant-AuthSource: BN0PR10MB5128.namprd10.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 08 Jan 2024 14:39:44.0156
 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 4e2c6054-71cb-48f1-bd6c-3a9705aca71b
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: iVsKHn8jM6QLj8cqBg8WnkrpMDYlxwKqg4pDeajv9hF5wZryXtQTse/EonznFeYIS0a9neZPmBBymQxDwHpRpA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DS0PR10MB6896
X-Proofpoint-Virus-Version: vendor=baseguard
 engine=ICAP:2.0.272,Aquarius:18.0.997,Hydra:6.0.619,FMLib:17.11.176.26
 definitions=2024-01-08_05,2024-01-08_01,2023-05-22_02
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 malwarescore=0 mlxscore=0 bulkscore=0
 mlxlogscore=999 adultscore=0 spamscore=0 phishscore=0 suspectscore=0
 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2311290000
 definitions=main-2401080125
X-Proofpoint-ORIG-GUID: Nj9Ucw4Qp9Rg6ADC6XJNf8_fvM7EVOcV
X-Proofpoint-GUID: Nj9Ucw4Qp9Rg6ADC6XJNf8_fvM7EVOcV

On Sun, Jan 07, 2024 at 11:33:31PM +0100, Cedric Blancher wrote:
> Could you please make a concentrated effort and allow non-2049 port
> numbers for NFSv4 mounts, in all of the lifecycle of a NFSv4 mount?
> From nfsd, nfsd referrals, client mount/umount, autofs
> mount/umount+LDAP spec

One reason we have not pursued stack-wide NFSv4 support for
alternate ports is that they are not firewall-friendly. A major
design point of NFSv4 (and NFSv4.1, with its backchannel) is that
it is supposed to be more firewall-friendly than NFSv3, its
auxiliary protocols, and its requirement to deploy rpcbind.

Also, these days it is relatively easy in Linux to deploy multiple
NFS services on a single physical host by using containers (or just
separate network namespaces). So instead of alternate ports, each
NFS service is on port 2049, but it has its own IP address. That
kind of deployment is supposed to be fully supported with NFSD today.

Commercial NFS server implementations also typically make it easy
to add distinct NFSv4 services at unique IP addresses but all on
port 2049.

-- 
Chuck Lever