So I figured I'd give the group a shot at this.

I've got a client that wants to have 2 linux-based ftp/http servers, one in the LAN and one in the DMZ, share some data. NFS would be perfect.

However-

The security group will not allow server in the DMZ to access the LAN-based Netapp through the firewall for its NFS resource. Also, I cannot put an interface from the Netapp into the DMZ.

They WILL allow it if it's encrypted.

I saw WebNFS, does Netapp support some sort of NFS over HTTPS? or SSH?

ONTAP supports IPSEC. That should work, but it will increase the CPU load on the filer. I don't think it's an issue for HTTP/FTP setups, but it might cause problems with heavy PPS environments.

What I don't understand is if the data their sending is basically unencrypted (HTTP and FTP?!??!) why does the NFS component need to be super secure from "teh hax0rz."?

Regards, Max

Alternatively, the client said that what would be allowed is if the two servers could share the same LUN- FC only, no iSCSI. Has anyone out there tried that before, what needs to be done on the linux side to make that happen?

Thanks

Glenn (the other one)