[OpenAFS] OpenAFS speed - some benchmarks

[Ken Hornstein]

>I doubt anyone with a large AFS infrastructure is going to throw it away,
>but there are some reasons why people would be looking at NFSv4.  One of
>the reasons that came up here recently was decentralized administration.
>Right now, all AFS servers have to be highly trusted because they all
>share a powerful key.  I believe this is not the case with NFSv4, which
>would allow a department with a grant to throw up their own NFSv4 server,
>have referrals inserted at the right place in a global namespace, and be
>off and running without compromising the security of the whole
>infrastructure if their system is broken into.

I've seen people do pretty good with having one central Kerberos server,
and one AFS cell per department (all sharing the same Kerberos namespace).
You have to know what you're doing for that to work well, though :-)

--Ken