odd oyster
I've got an internal customer who has a requirement to read/write data to a volume over an inherently encrypted protocol like SFTP instead of default CIFS/NFS. I understand SFTP is no longer natively supported, but he's asked me to raise the question to support to see if this is a plan for future releases?
Are there other options? Encrypted SMB on a particular share maybe? We don't generally enforce encryption at the storage level so I'm not super familiar with the options available.
wind widget
You could use IPsec: https://docs.netapp.com/us-en/ontap/networking/configure_ip_security_@ipsec@_over_wire_encryption.html
finite hull
SFTP isn’t an option unfortunately. You can configure NFS with encryption - check out krb5p. SMB encryption also works - https://docs.netapp.com/us-en/ontap/smb-admin/configure-required-encryption-concept.html
If they really want SFTP, I would suggest to setup a gateway VM running it which mounts a share via krb5p
velvet elbow
As noted, there are many different options to access data over an encrypted protocol. Starting with ONTAP 9.12.1, you can also enable S3 clients access NAS volumes in case there is a limitation/restriction on using SMB/NFS.
long meteor
The other way to accomplish this is to setup a Linux box, mount the NetApp shares via [encrypted] NFS, and have clients connect to the Linux box over SFTP.
finite hull
The other way to accomplish this is to setup a Linux box, mount the NetApp share...
Is that different to my way Mr Waltham? 😉
long meteor
I missed your final paragraph 😦 so no, not different
finite hull
Just checking 😉
devout needle
Or find an old 7-mode and keep it off of the network. 😄
