From nobody Wed May 18 07:45:10 2022 X-Original-To: freebsd-fs@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 146551AEFACD for ; Wed, 18 May 2022 07:45:22 +0000 (UTC) (envelope-from SRS0=hE4k=V2=perdition.city=julien@bebif.be) Received: from orval.bbpf.belspo.be (orval.bbpf.belspo.be [193.191.208.90]) by mx1.freebsd.org (Postfix) with ESMTP id 4L34lh6zGVz4sFr for ; Wed, 18 May 2022 07:45:20 +0000 (UTC) (envelope-from SRS0=hE4k=V2=perdition.city=julien@bebif.be) Received: from x1 (77.109.114.188.adsl.dyn.edpnet.net [77.109.114.188]) by orval.bbpf.belspo.be (Postfix) with ESMTPSA id C16461047E for ; Wed, 18 May 2022 09:45:13 +0200 (CEST) Date: Wed, 18 May 2022 09:45:10 +0200 From: Julien Cigar To: freebsd-fs@freebsd.org Subject: NFS4 over wireguard (WAN) Message-ID: <20220518074510.ulo3mqjjiwlgt7zq@x1> Mail-Followup-To: freebsd-fs@freebsd.org List-Id: Filesystems List-Archive: https://lists.freebsd.org/archives/freebsd-fs List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-fs@freebsd.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="vtqlovt3vcaxyor7" Content-Disposition: inline X-Rspamd-Queue-Id: 4L34lh6zGVz4sFr X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none; spf=pass (mx1.freebsd.org: domain of "SRS0=hE4k=V2=perdition.city=julien@bebif.be" designates 193.191.208.90 as permitted sender) smtp.mailfrom="SRS0=hE4k=V2=perdition.city=julien@bebif.be" X-Spamd-Result: default: False [-2.71 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; ARC_NA(0.00)[]; RECEIVED_SPAMHAUS_PBL(0.00)[77.109.114.188:received]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; R_SPF_ALLOW(-0.20)[+mx]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; TO_DN_NONE(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[freebsd-fs@freebsd.org]; NEURAL_SPAM_MEDIUM(0.76)[0.761]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-1.00)[-1.000]; MID_RHS_NOT_FQDN(0.50)[]; NEURAL_HAM_SHORT(-0.97)[-0.971]; DMARC_NA(0.00)[perdition.city]; MLMMJ_DEST(0.00)[freebsd-fs]; FORGED_SENDER(0.30)[julien@perdition.city,SRS0=hE4k=V2=perdition.city=julien@bebif.be]; RCVD_NO_TLS_LAST(0.10)[]; SIGNED_PGP(-2.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; ASN(0.00)[asn:2611, ipnet:193.191.192.0/19, country:BE]; FROM_NEQ_ENVFROM(0.00)[julien@perdition.city,SRS0=hE4k=V2=perdition.city=julien@bebif.be]; RCVD_COUNT_TWO(0.00)[2] X-ThisMailContainsUnwantedMimeParts: N --vtqlovt3vcaxyor7 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hello, I'm configuring pgbackrest to backup our PostgreSQL server and I'd like to use the "Multiple Repositories" functionality (https://pgbackrest.org/user-guide.html#multi-repo) to have one local repository and one remote (Hetzner dedicated server). The remote server is running 13.1-RELEASE, our routers/firewalls are running=20 12.3-RELEASE (PF, CARP, ...), both with wireguard (using the kernel=20 module).=20 As pgbackrest supports Posix, S3, Azure, GCS and that I don't use any of those cloud providers I'd like to setup a NFS server (V4) on the remote server and mount it on the local server through the wireguard link.=20 I was wondering if special precautions (mount options, sysctl, ...?)=20 need to be taken for a NFS link over wireguard (through WAN)? Thanks! Julien --=20 Julien Cigar PGP fingerprint: EEF9 F697 4B68 D275 7B11 6A25 B2BB 3710 A204 23C0 No trees were killed in the creation of this message. However, many electrons were terribly inconvenienced. --vtqlovt3vcaxyor7 Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEnF27CBNtOraRNmgqCLYqJMpBHmkFAmKEpAMACgkQCLYqJMpB HmltmhAAqnkABt+STmCMf5Zpdk+UAf+ioe+ObI8Zops3HquEPRpM1InH8YgOUxhW A4cZZy8vWA5ODRLi5sz9ldIoyDTAo8+K38FgbkCY7OB7HD8uy0514yXz520iOp5U NSp9RPxrhelewvGq2NpDNE6A/q1qYy1loz2hS28CsF0lGZX7L4gKi5xm7b7cyMpz 0kWrltspVj/auJuwmGrbmvRIqvkTA25XBrBmv3kzo9bmRKSj0NS5N7/pw6AcoBon lq5NOfYas6GCkNF1H/WSG3FSL8CVcTgauH63N86ZEyIn1QKZC1lHHjt2pcu2YWVZ 7RYv0uKGYmjcACidGkB7vXH2FrK6iJz7FV1NFaIwOQ0g3cF7dxpatmrBp24XdxAT HJ+0sPpjU4qzZF8w7T13qw9f+hnFM9/fFzLqvi8XqrZ/WRkCB8DUD3LDsf4DoFjD rnmmZVWDRr2G6jchVkOCb7BVnni0hmh+kObUXvnV/rvA19+m5ZJbYgVMTKzPGAEI vUjJv/mJFvNtXfPylBRtsHdKqLSlAez+GAN5kaDGNPZTBh8CSs9AaOvZpfY3frZB GH1CDvOSLA1MpHb8qIPOh19g2TI8/LlKp6Xz8E90fya7eOBHfFFg3LUXdQeONkQe q/g44l3zUR2i9NnPcs/M1VDlo2m5fMYoEBKYxNMBpLJzaXgRgyk= =wbq3 -----END PGP SIGNATURE----- --vtqlovt3vcaxyor7--