[SAC] download server: No space left on device

Sandro Santilli strk at kbt.io
Mon May 14 09:08:45 PDT 2018


On Mon, May 14, 2018 at 02:40:11PM +0000, Martin Spott wrote:
> Sandro Santilli wrote:
> > On Sun, May 13, 2018 at 10:43:16PM +0200, Jürgen E. Fischer wrote:
> >> 
> >> I reinstated NFS and blocked port 111 udp/tcp except from/to osgeo6/download.
> > 
> > Thank you Jürgen, great solution !
> 
> I disagree, this is a "not-that-great" solution because the entire NFS-setup
> adds unnecessary security risks as well as komplexity where a simple reverse
> proxy would have been sufficient for serving the files to the user.

What I found great was his ability to do something quickly :)

If we want to find another solution we can do it now with less
pressure.

 Reverse proxy
    pro: doesn't need another service
    con: uploaders need to know where to upload things ?
    con: backup configuration is more complex ?

 NFS:
    pro: transparent to web server
    pro: transparent to uploader
    con: introduces a new service

Please add your cons/pros!

--strk;



More information about the Sac mailing list