Slow NFS writes with sec=krb5

[Florian Oppermann]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Ok, we kind of resolved the issue: For strange reasons unknown to us
our predecessors used a separate keytab for the nfs/… kerberos
principal and modified the line

> exec rpc.gssd

in /etc/init/gssd.conf to

> exec rpc.gssd -t 30 -k /etc/krb5.nfs.keytab

After merging the keytabs and restoring the original line the NFS
mount is fast for current kernel versions.

We still don’t know why this slowed down the connection but it works now
…

Best regards,
Florian

On 07.10.2015 11:51, Florian Oppermann wrote:
> Sorry for talking to myself…
> 
>> 1) On one slow machine that is running precise I booted into an 
>> old kernel image (3.2 instead of 3.13). The behaviour was the 
>> expected: The kerberized automount got fast write speeds.
>> Booting back to 3.13 made it slow again.
> 
> I expanded this test scenario on one of our trusty machines and 
> installed some old kernel versions: From 3.2 to 3.11.10.15 the NFS 
> mount was fast, it got slow at version 3.12.0rc1 (last two
> packages for saucy). (Note: I refer to the packages from 
> <http://kernel.ubuntu.com/~kernel-ppa/mainline/>.)
> 
> Maybe someone with more knowledge about NFS or kernel development 
> could have a look at the changelog 
> (<http://kernel.ubuntu.com/~kernel-ppa/mainline/v3.12-rc1-saucy/CHANGE
S>
>
> 
).
> I believe some change there has undesired effects in certain
> environment s.
> 
> Best regards, Florian
> 
> On 05.10.2015 18:14, Florian Oppermann wrote:
>> On 05.10.2015 17:25, Brandon Vincent wrote:
>>> There was an issue with the system detecting if gssd was 
>>> running, so my only recommendation to you is to update to the 
>>> latest kernel and NFS/Kerberos related packages and see if
>>> that resolves your issue.
> 
>> I just tried the following things:
> 
>> 1) On one slow machine that is running precise I booted into an 
>> old kernel image (3.2 instead of 3.13). The behaviour was the 
>> expected: The kerberized automount got fast write speeds.
>> Booting back to 3.13 made it slow again.
> 
>> I think this rules out the possibility that some other packages 
>> have broken something and should be upgraded.
> 
>> 2) On one of our trusty machines I installed the .debs for 4.0.0,
>>  4.1.0, 4.2.3 and 4.3.0 from 
>> <http://kernel.ubuntu.com/~kernel-ppa/mainline/>. None of the new
>>  kernels enabled the fast kerberized NFS automount.
> 
>> I suspected them to solve the issue because my laptop with Debian
>>  testing had fine write performance. I have to check the kernel 
>> version though.
> 
>> Maybe we’ll just try to setup one machine with a clean 15.10
>> when it’s released.
> 
>> Best regards, Florian
> 
> 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQIcBAEBAgAGBQJWFSrxAAoJEG3w8CyVCAFpzJIQAN0wblDdfCbwNB+SPHFbbbr7
AM2O4f64NeXzY7zCWwn+HhSYQ+nheW1ByEIXheuZs8NF1GMQ+RSli/bhRORUt140
IXFQf4zNc8HmaGcGrs5MBPW/ayuELdM6HIL9nIdmgFCN4/i6e1paw4EKcisFJFbS
Bp45uwUKn09t48uDsAPVZ+G03vbX9aSimid9Dj1cmzG/TSjhHfio2Gt0yWxMpbdc
gi1HpDQk8R8Cb31OxgI8vQ/9jF4A8A30xWPCyxWHQcaLdRR9NRhyPvxiAYKrtE+U
jxHlEZLWaX6WFr/WkN/6xBSV9DO3ULO2d8+i927PWYSWXie3B8aYfVCSW731qYYg
FdQSdPU0/nGZJTKKwlu2aSC/N1J5g8TVQmU2n4Nmwu+B+4sxSdPkWH0EMGninEM0
Hc7r7GvXk63b22KjezdXDPdW6yNloyKL8WWkZpyzk7tNkObUUtfrV6rBcP17Syzp
GBJLb0Eulk3eXc5OFvZlKyzZpzICj2Yl0WrJfdrqZugdC44AsJjCdv4KZjR3ArPO
TQ2V//YzWoS7Dq+UFElbw4+P9ho3aVQK1FyDh2gnRr4uO2kD7eDOv58rXPn6P8aH
H5XViopAp17wDjRLpBtSyghfL4vt1Gq29l4juKtnJeJ5QJnjPvMEmrzEezgPRd6s
Q3up8D7n9FwCg0SQ5BBr
=mujA
-----END PGP SIGNATURE-----