To the Cloud and Beyond, Accessing Files Remotely from Linux via SMB3.1.1
summary
Linux CIFS client and a new kernel server ksmbd (merged around 5.15) add SMB3.1.1 features: kernel-side AES-256 encryption, RDMA/smbdirect and multichannel support, duplicate-extent handling on btrfs, and early QUIC experimentation. Client-side changes report large gains — a 41% baseline throughput uplift versus older defaults and up to 3x faster for large copies and deferred-close workloads — plus finer metadata caching, 40+ automated tests on buildbot, and ongoing security fixes after initial ksmbd hardening.
AI-written summary · about
chapters (10)
- 0:00Start
- 9:35What about SMB3 server (on Linux)? Samba server is great and hugo, and full function
- 13:10AES-256 encryption support
- 13:56Duplicate extent support
- 14:35SMB3 multi-channel support
- 16:17Currently working features
- 18:47Remember the security models: idsfromsid, modefromsid, cifsad improved in 5.9 kernel
- 23:28What about Security Improvements?
- 26:53What about the future? What should we expect?
- 28:31Some general configuration advice
related talks
15mSMB3 Linux/POSIX Protocol Extensions: Overview and Update on Current Implementations
16mA re-introduction to s3fs- 16mA re-introduction to s3fs
28mCeph on Windows
42mUnlimited Fileserver with Samba CTDB and CephFS
31mUsing kAFS on Linux for Network Home Directories
39mSecured I/O in the Cloud with NVMe-Over-TCP
15mSMC-R protocol in Storage Software