Re: [ANNOUNCE 0/7] Open-iSCSI/Linux-iSCSI-5 High-Performance Initiator

[Alex Aizman <itn780@yahoo.com>]

Christian Iversen wrote:
> On Wednesday 01 June 2005 23:08, Alex Aizman wrote:
> 
>>Patrick McFarland wrote:
>>
>>>On Wednesday 01 June 2005 04:08 pm, Alex Aizman wrote:
>>>
>>>>This is open-iscsi/linux-iscsi-5 Initiator. This submission is ready for
>>>>inclusion into mainline kernel.
>>>
>>>Awesome! So is this complete enough so I can, say, play DVDs from one box
>>>using an ATAPI DVD drive in another box?
>>
>>Yep, that's what iSCSI is for, in part. You'll need iSCSI target to connect
>>to the SCSI backend, e.g. http://iscsitarget.sourceforge.net/
> 
> 
> This is really, really good work. Please keep it up :-)
> 
> I'm very much looking forward to comparing this to DVD-over-NBD, which works 
> fine, except when you need to change the disc. The NBD server locks the drive 
> when it's running, and you need to restart both client and server after a 
> disc change.
> 
> Briefly, what are the security features available? I assume I can do simple 
> things like only allow access to an IP range (can I?), but what about more 
> complex things like encryption?
> 

Briefly: in-band authentication at connection level is supported. You will not 
find it in the submitted code, it's all in user space, where it should be. IPsec 
encryption, as well as data integrity and confidentiality, is not supported yet. 
According to RFC, IPsec is a must to implement and optional to use. It's a 
feature, it can be added.