Re: [Qemu-devel] [PATCH] qemu-nbd: Permit TLS with Unix sockets

2019-06-27 Thread Eric Blake
On 6/27/19 9:58 AM, Daniel P. Berrangé wrote: >>> >>> Do you need something on the client side too ? >> >> The proposal that Rich is working on for standardized NBD URIs [1] says >> that we need a patch to support nbds://host/export and >> nbds+unix://export?socket=/path as ways to request an encr

Re: [Qemu-devel] [PATCH] qemu-nbd: Permit TLS with Unix sockets

2019-06-27 Thread Daniel P . Berrangé
On Thu, Jun 27, 2019 at 09:49:13AM -0500, Eric Blake wrote: > On 6/26/19 3:22 AM, Daniel P. Berrangé wrote: > > On Tue, Jun 25, 2019 at 09:49:42PM -0500, Eric Blake wrote: > >> Although you generally won't use encryption with a Unix socket (after > >> all, everything is local, so why waste the CPU

Re: [Qemu-devel] [PATCH] qemu-nbd: Permit TLS with Unix sockets

2019-06-27 Thread Eric Blake
On 6/26/19 3:22 AM, Daniel P. Berrangé wrote: > On Tue, Jun 25, 2019 at 09:49:42PM -0500, Eric Blake wrote: >> Although you generally won't use encryption with a Unix socket (after >> all, everything is local, so why waste the CPU power), there are >> situations in testsuites where Unix sockets are

Re: [Qemu-devel] [PATCH] qemu-nbd: Permit TLS with Unix sockets

2019-06-26 Thread Richard W.M. Jones
On Tue, Jun 25, 2019 at 09:49:42PM -0500, Eric Blake wrote: > Although you generally won't use encryption with a Unix socket (after > all, everything is local, so why waste the CPU power), there are > situations in testsuites where Unix sockets are much nicer than TCP > sockets. Since nbdkit allow

Re: [Qemu-devel] [PATCH] qemu-nbd: Permit TLS with Unix sockets

2019-06-26 Thread Daniel P . Berrangé
On Tue, Jun 25, 2019 at 09:49:42PM -0500, Eric Blake wrote: > Although you generally won't use encryption with a Unix socket (after > all, everything is local, so why waste the CPU power), there are > situations in testsuites where Unix sockets are much nicer than TCP > sockets. Since nbdkit allow

[Qemu-devel] [PATCH] qemu-nbd: Permit TLS with Unix sockets

2019-06-25 Thread Eric Blake
Although you generally won't use encryption with a Unix socket (after all, everything is local, so why waste the CPU power), there are situations in testsuites where Unix sockets are much nicer than TCP sockets. Since nbdkit allows encryption over both types of sockets, it makes sense for qemu-nbd