Network File System Version 4 C. Lever, Ed. Internet-Draft Oracle Obsoletes: 5667 (if approved) June13,30, 2016 Intended status: Standards Track Expires:December 15, 2016January 1, 2017 Network File System (NFS)Direct Data Placement draft-ietf-nfsv4-rfc5667bis-00Upper Layer Binding To RPC-Over-RDMA draft-ietf-nfsv4-rfc5667bis-01 Abstract This documentdefinesspecifies thebindingsUpper Layer Bindings ofthe variousNetwork File System (NFS) protocol versions tothe Remote Direct Memory Access (RDMA) operations supported by theRPC-over-RDMAtransport protocol. It describes thetransports. Such Upper Layer Bindings are required to enable RPC-based protocols to useofdirect data placementby means of server-initiated RDMA operations into client-supplied buffers for implementations of NFS versions 2, 3, 4, and 4.1 over such an RDMA transport.when conveying large data payloads on RPC- over-RDMA transports. This document obsoletes RFC 5667. Status of This Memo This Internet-Draft is submitted in full conformance with the provisions of BCP 78 and BCP 79. Internet-Drafts are working documents of the Internet Engineering Task Force (IETF). Note that other groups may also distribute working documents as Internet-Drafts. The list of current Internet- Drafts is at http://datatracker.ietf.org/drafts/current/. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." This Internet-Draft will expire onDecember 15, 2016.January 1, 2017. Copyright Notice Copyright (c) 2016 IETF Trust and the persons identified as the document authors. All rights reserved. This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (http://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Simplified BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Simplified BSD License. Table of Contents 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . 2 1.1. Requirements Language . . . . . . . . . . . . . . . . . .23 1.2. Changes Since RFC 5667 . . . . . . . . . . . . . . . . . 3 1.3. Planned Changes To This Document . . . . . . . . . . . .24 2.Transfers from NFS Client toConveying NFSServerOperations On RPC-Over-RDMA Transports . . . . 4 2.1. Use Of The Read List . . . . . . .3 3. Transfers from NFS Server to NFS Client. . . . . . . . . . .3 4. NFS Versions 2 and 3 Mapping4 2.2. Use Of The Write List . . . . . . . . . . . . . . . . . . 55.2.3. Construction Of Individual Chunks . . . . . . . . . . . . 5 2.4. Use Of Long Calls And Replies . . . . . . . . . . . . . . 5 3. NFS Versions 2 And 3 Upper Layer Binding . . . . . . . . . . 5 4. NFS Version 4MappingUpper Layer Binding . . . . . . . . . . . . . . 6 4.1. NFS Version 4 COMPOUND Considerations . . . . . .6 5.1.. . . . 7 4.2. NFS Version 4 Callbacks . . . . . . . . . . . . . . . . . 86.5. IANA Considerations . . . . . . . . . . . . . . . . . . . . .9 7.8 6. Security Considerations . . . . . . . . . . . . . . . . . . . 98.7. Acknowledgments . . . . . . . . . . . . . . . . . . . . . . . 99.8. References . . . . . . . . . . . . . . . . . . . . . . . . .10 9.1.9 8.1. Normative References . . . . . . . . . . . . . . . . . .10 9.2.9 8.2. Informative References . . . . . . . . . . . . . . . . . 10 Author's Address . . . . . . . . . . . . . . . . . . . . . . . . 11 1. IntroductionTheRemote Direct Memory Access(RDMA)Transport for Remote ProcedureCall (RPC)Call, Version One [I-D.ietf-nfsv4-rfc5666bis]allows an RPC client application(RPC-over-RDMA) enables the use of direct data placement topost buffers in a Chunk list for specific arguments and results from anaccelerate the transmission of large data payloads associated with RPCcall. The RDMAtransactions. Each RPC-over-RDMA transport headerconveys this list of client buffer addresses to the server where the applicationcanassociate them with clientconvey lists of memory locations involved in direct transfers of dataand use RDMA operations to transfer the results directlypayloads. These memory locations correspond toand from the posted buffers on the client. TheXDR data items defined in an Upper Layer Protocol (such as NFS). To facilitate interoperation, RPC client and server implementations must agree ona consistent mapping of posted buffers to RPC.what XDR data items in which RPC procedures are eligible for direct data placement (DDP). This documentdetailsspecifies themapping forset of XDR data items in eachversionof the following NFS protocol versions that are eligible for DDP. It also contains additional material required of Upper Layer Bindings as specified in [I-D.ietf-nfsv4-rfc5666bis]. o NFS Version 2 [RFC1094] o NFS Version 3 [RFC1813] o NFS Version 4.0 [RFC7530][RFC5661].o NFS Version 4.1 [RFC5661] o NFS Version 4.2 [I-D.ietf-nfsv4-minorversion2] The Upper Layer Binding specified in this document can be extended to cover the addition of new DDP-eligible XDR data items defined by versions of the NFS version 4 protocol specified after this document has been ratified. 1.1. Requirements Language The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in [RFC2119]. 1.2.PlannedChangesTo This DocumentSince RFC 5667 Corrections and updates made necessary by new language in [I-D.ietf-nfsv4-rfc5666bis] has been introduced. For example, references to deprecated features of RPC-over-RDMA Version One, such as RDMA_MSGP, and the use of the Read list for handling RPC replies, has been removed. The term "mapping" has been replaced with the term "binding" or "Upper Layer Binding" throughout the document. Material that duplicates what is in [I-D.ietf-nfsv4-rfc5666bis] has been deleted. Material required by [I-D.ietf-nfsv4-rfc5666bis] for Upper Layer Bindings that was not present in [RFC5667] has been added, including discussion of how each NFS version properly estimates the maximum size of RPC replies. The following changeswill behave been made, relative to [RFC5667]: o Ambiguous or erroneous uses of RFC2119 terms have been corrected. o References to[RFC5666] will be replaced with references to [I-D.ietf-nfsv4-rfc5666bis]. Corrections and updates relative to new language in [I-D.ietf-nfsv4-rfc5666bis] will be introduced.specific data movement mechanisms have been made generic or removed. o References to obsolete RFCswill behave been replaced. o Technical corrections have been made. For example, the mention of 12KB and 36KB inline thresholds have been removed. The reference to a non-existantNFSv4NFS version 4 SYMLINK operationwill behas been replaced withNFSv4NFS version 4 CREATE(NF4LNK). oTheAn IANA Considerations Section has replaced the "Port Usage Considerations" Section. o Code excerpts have been removed, and figures have been modernized. o Language inconsistent with or contradictory to [I-D.ietf-nfsv4-rfc5666bis] has been removed from Sections 2 and 3, and both Sections have been combined into Section 2 in the present document. o An explicit discussion of12KBNFSv4.0 and36KB inline thresholdNFSv4.1 backchannel operation willbe removed.replace the previous treatment of callback operations. No NFSv4.x callback operation is DDP-eligible. o The binding for NFSv4.1 has been completed. No additional DDP- eligible operations exist in NFSv4.1. o A binding for NFSv4.2 has been added that includes discussion ofNFSv4new data-bearing operations like READ_PLUS. 1.3. Planned Changes To This Document The following changes are planned, relative to [RFC5667]: o The discussion of NFS version 4 COMPOUND handling will be completed. oAn explicit discussion of NFSv4.0 and NFSv4.1 backchannel operationRemarks about handling DDP-eligibility violations will be introduced. oAn IANA Considerations sectionA discussion of how the NFS binding to RPC-over-RDMA isrequiredextended byIDNITS. o Code excerptsstandards action will bemodernized. Other minor changes and editorial corrections may also be made.added. 2.Transfers fromConveying NFSClientOperations On RPC-Over-RDMA Transports Definitions of terminology and a general discussion of how RPC-over- RDMA is used to convey RPC transactions can be found in [I-D.ietf-nfsv4-rfc5666bis]. In this section, these general principals are applied to the specifics of the NFSServerprotocol. 2.1. Use Of TheRDMAReadlist,List The Read list inthe RDMAeach RPC-over-RDMA transportheader, allows an RPC client to marshal RPC call data selectively. Large chunksheader represents a set ofdata,memory regions containing DDP-eligible NFS argument data. Large data items, such as the file data payload of an NFS WRITE request,MAY beare referenced byan RDMAthe Read list andbe moved efficiently and directlyplacedby an RDMA Read operation initiated by the server. The process of identifying these chunks for the RDMA Read list can be implemented entirely within the RPC layer. It is transparent to the upper-level protocol, such as NFS. For instance, the file data portion of an NFS WRITE request can be selected as an RDMA "chunk" within the eXternal Data Representation (XDR) marshaling code of RPC based on a size criterion, independently of the NFS protocol layer. Thedirectly into server memory. XDR unmarshaling code on thereceiving system can identifyNFS server identifies the correspondence between Read chunks andprotocol elementsparticular NFS arguments via theXDR positionchunk Position value encoded inthe Read chunk entry. RPC RDMAeach Readchunkschunk. 2.2. Use Of The Write List The Write list in each RPC-over-RDMA transport header represents a set of memory regions that can receive DDP-eligible NFS result data. Large data items such as the payload of an NFS READ request areemployedreferenced bythis NFS mappingthe Write list and placed directly into client memory. Each Write chunk corresponds toconveya specificNFSXDR datato the serveritem ina manner that may be directly placed. The following sections describe this mapping for versions of the NFS protocol. 3. Transfers froman NFSServer toreply. This document specifies how NFSClient The RDMA Write list, in the RDMA transport header, allows theclientto post one or more buffers into which theand serverwill RDMA Write designated result chunks directly. Ifimplementations identify theclient sends a nullcorrespondence between Writelist, then results from the RPC call will be returned either as an inline reply, aschunksin an RDMAand each XDR result. 2.3. Construction Of Individual Chunks Each Read chunk is represented as a list ofserver-posted buffers, or in a client-posted reply buffer. Each posted buffer in asegments at the same XDR Position, and each Writelistchunk is represented as an array ofmemorysegments.This allows theAn NFS clientsome flexibility in submitting discontiguous memory segments into which the server will scatterthus has theresult. Each segment is described byflexibility to advertise atriplet consistingset ofthe segment handle or steering tag (STag), segment length, and memory address or offset. <CODE BEGINS> struct xdr_rdma_segment { uint32 handle; /* Registereddiscontiguous memoryhandle */ uint32 length; /* Length of the chunkregions inbytes */ uint64 offset; /* Chunk virtual address or offset */ }; struct xdr_write_chunk { struct xdr_rdma_segment target<>; }; struct xdr_write_list { struct xdr_write_chunk entry; struct xdr_write_list *next; }; <CODE ENDS> The sum of the segment lengths yields the total size of the buffer,whichMUST be large enoughtoaccept the result.send or receive a single DDP-eligible data item. 2.4. Use Of Long Calls And Replies Small RPC messages are conveyed using RDMA Send operations which are of limited size. Ifthe bufferan NFS request is toosmall, the server MUST returnlarge to be conveyed via anXDR encode error. The server MUST return the resultRDMA Send, and there are no DDP-eligible datafor a posted buffer by progressively filling its segments, perhaps leaving some trailing segments unfilled or partially full if the size of the result is less than the total size ofitems that can be removed, an NFS client must send thebuffer segments.request using a Long Call. Theserver returns the RDMA Write list to theentire NFS request is sent in a special Read chunk. If a clientwith the segment length fields overwritten to indicate the amount of data RDMA writtenexpects that an NFS reply will be too large toeach segment. Results returned by direct placement MUST NOTbereturned by other methods, e.g., by Readconveyed via an RDMA Send, it provides a Reply chunklist or inline. If no result data at all is returned for the element, the server places no datain thebuffer(s), but does return zeros in the segment length fields corresponding to the result. TheRPC-over- RDMAWrite list allows the client to provide multiple result buffers -- each buffer maps to a specific result intransport header conveying thereply. TheNFSclient and server implementations agree by specifying the mapping of results to buffers for each RPC procedure.request. Thefollowing sections describe this mapping for versions of the NFS protocol. Throughserver can place theuse of RDMA Write lists inentire NFSrequests, it is not necessary to employ the RDMA Read listsreply in theNFS replies, asReply chunk. These are described inthe RPC-over-RDMA protocol. This enablesmoreefficient operation, by avoiding the need for the server to expose buffers for RDMA, and also avoiding "RDMA_DONE" exchanges. Clients MAY additionally employ RDMA Reply chunks to receive entire messages, as describeddetail in [I-D.ietf-nfsv4-rfc5666bis].4.3. NFS Versions 2andAnd 3Mapping A single RDMA Write list entry MAY be posted by theUpper Layer Binding An NFS client MAY send a single Read chunk toreceive either thesupply opaque file datafrom a READ requestfor an NFS WRITE procedure, or the pathnamefrom a READLINK request. Thefor an NFS SYMLINK procedure. For all other NFS procedures, the server MUST ignore Read chunks that have aWrite list for any other NFS procedure, as well as any Write list entriesnon-zero value in their Position fields, and Read chunks beyond the first in the Read list. Similarly, an NFS client MAY provide a singleRDMA Read list entry MAY be posted by the clientWrite chunk tosupply thereceive either opaque file datafor a WRITE requestfrom an NFS READ procedure, or the pathnamefor a SYMLINK request.from an NFS READLINK procedure. The server MUST ignoreany Readthe Write list for any other NFSprocedures, as well as additional Read list entriesprocedure, and any Write chunks beyond the first in the Write list.Because thereThere are no NFS version 2 or 3requestsprocedures thattransfer bulkhave DDP-eligible data items in bothdirections, it is not necessary to post requests containing both Writetheir Call andRead lists. Any unneeded ReadReply. However, if an NFS client is sending a Long Call or Reply, it MAY provide a combination of Read list, Writelists are ignored bylist, and/or a Reply chunk in theserver. Insame transaction. NFS clients already successfully estimate thecase wheremaximum reply size of each operation in order to provide an adequate set of buffers to receive each NFS reply. An NFS client provides a Reply chunk when theoutgoing request or expected incomingmaximum possible reply size is larger than themaximum size supported on the connection, it is possible forclient's responder inline threshold. How does theRPC layer to postserver respond if theentire message or result in a special "RDMA_NOMSG" message type that is transferred entirely by RDMA. This is implemented in RPC, below NFS, and thereforeclient hasno effect on the message contents. Non-RDMA (inline)not provided enough Write list resources to handle an NFS WRITEtransfers MAY OPTIONALLY employ the "RDMA_MSGP" padding method described in the RPC-over-RDMA protocol, if the appropriate value foror READLINK reply? How does the serveris known to the client. Padding allowsrespond if theopaque file dataclient has not provided enough Reply chunk resources toarrive at the server inhandle analigned fashion, which may improve server performance. TheNFSversion 2 and 3 protocols are frequently limited in practice to requests containing less than or equalreply? 4. NFS Version 4 Upper Layer Binding This specification applies to8 kilobytesNFS Version 4.0 [RFC7530], NFS Version 4.1 [RFC5661], and32 kilobytesNFS Version 4.2 [I-D.ietf-nfsv4-minorversion2]. It also applies to the callback protocols associated with each ofdata, respectively. Inthesecases, it is often practical to support basic operation without employingminor versions. An NFS client MAY send aconfiguration exchange as discussed in [I-D.ietf-nfsv4-rfc5666bis]. The server MUST post buffers large enoughRead chunk toreceivesupply opaque file data for a WRITE operation or thelargest possible incoming message (approximately 12 KBpathname for a CREATE(NF4LNK) operation in an NFS version2, or 36 KB for4 COMPOUND procedure. An NFS client MUST NOT send a Read chunk that corresponds with any other XDR data item in any other NFS version3, would be vastly sufficient), and the4 operation. Similarly, an NFS clientcan post buffers large enoughMAY provide a Write chunk to receivereplies based on the "rsize" it is using to the server, pluseither opaque file data from afixed overhead forREAD operation, NFS4_CONTENT_DATA from a READ_PLUS operation, or theRPC andpathname from a READLINK operation in an NFSheaders. Because the serverversion 4 COMPOUND procedure. An NFS client MUST NOTreturnprovide a Write chunk that corresponds with any other XDR data item inexcess of this size, the client can be assured of the adequacy of its posted buffer sizes. Flow control is handled dynamically by the RPC RDMA protocol, and write paddingany other NFS version 4 operation. There isOPTIONALno prohibition against an NFS version 4 COMPOUND procedure constructed with both a READ andtherefore MAY remain unused. Alternatively, if the serverWRITE operation, say. Thus it isadministratively configured to values appropriatepossible forall its clients, the same assurance of interoperability within the domain can be made. TheNFS version 4 COMPOUND procedures to useof a configuration protocol withboth the Read list and Write list simultaneously. An NFSv2client MAY provide a Read list andv3 is therefore OPTIONAL. Employingaconfiguration exchange may allow some advantage to server resource management through accurately sizing buffers, enablingWrite list in theserversame transaction if it is sending a Long Call or Reply. Some remarks need toknow exactly how many RDMA Reads maybein progress at once on the client connection,made about how NFS version 4 clients estimate reply size, andenabling client write padding, which may be desirable for certain servers when RDMA Read is impractical. 5.how DDP-eligibility violations are reported. 4.1. NFS Version 4Mapping This specification applies to the first minor version ofCOMPOUND Considerations An NFS version 4(NFSv4.0) and any subsequent minor versions that do not override this mapping. The Write list MUST be considered only for theCOMPOUNDprocedure. Thisprocedurereturns results fromsupplies arguments for a sequence ofoperations. Only the opaque file dataoperations, and returns results from that sequence. A client MAY construct an NFSREAD operation and the pathname from a READLINK operation MUST utilize entries from the Write list. If there is no Write list, i.e.,version 4 COMPOUND procedure that uses more than one chunk in either the Read listis null, then any READorREADLINK operations in the COMPOUND MUST return their data inline.Write list. TheNFSv4.0NFS clientMUST ensureprovides XDR Position values inthis case that any result of its READeach Read chunk to disambiguate which chunk is associated with which XDR data item. However NFS server andREADLINK requests will fit within its receive buffers,client implementations must agree inorderadvance on how toavoid a resulting RDMA transport error upon transfer.pair Write chunks with returned result data items. Theservermechanism specified in [I-D.ietf-nfsv4-rfc5666bis]) isnot required to detect this.applied here: o The firstentrychunk in the Write list MUST be used by the first READ or READLINK operation inthean NFS version 4 COMPOUNDrequest.procedure. The next Writelist entrychunk is used by the next READ or READLINK, and so on. o If there are more READ or READLINK operations than Writelist entries,chunks, then any remaining operations MUST return their results inline. o If an NFS client presents a Writelist entry is presented,chunk, then the corresponding READ or READLINK operation MUST return its datavia an RDMA Write to the buffer indicatedbythe Write list entry.placing data into that chunk. o If the Writelist entrychunk has zero RDMA segments, or if the total size of the segments is zero, then the corresponding READ or READLINK operation MUST return its result inline. The following example showsan RDMAa Write list with threeposted buffersWrite chunks, A, B, and C. The server consumes the provided Write chunks by writing the results of the designated operations in the compound request, READ and READLINK,consume the posted buffers by writing their resultsback to eachbuffer. RDMAchunk. Write list: A --> B --> CCompoundNFS version 4 COMPOUND request: PUTFH LOOKUP READ PUTFH LOOKUP READLINK PUTFH LOOKUP READ | | | v v v A B C If the client does not want to have the READLINK result returned directly,thenit provides a zero-length array of segment triplets for buffer B or sets the values in the segment triplet for buffer B to zerossoto indicate that the READLINK resultMUSTmust be returned inline.The situation is similar for RDMA Read lists sent by the client and applies to the NFSv4.0 WRITE and SYMLINK procedures as for v3. Additionally, inline segments too large to fit in posted buffers MAY be transferred in special "RDMA_NOMSG" messages. Non-RDMA (inline) WRITE transfers MAY OPTIONALLY employ the "RDMA_MSGP" padding method described in the RPC-over-RDMA protocol, if the appropriate value for the server is known to the client. Padding allows the opaque file data to arrive at the server in an aligned fashion, which may improve server performance. In order to ensure accurate alignment for all data, it is likely that the client will restrict its use of OPTIONAL padding to COMPOUND requests containing only a single WRITE operation.Unlike NFS versions 2 and 3, the maximum size of an NFS version 4 COMPOUND is notbounded, even when RDMA chunks are in use. While it might appear that a configuration protocol exchange (such as the one described in [I-D.ietf-nfsv4-rfc5666bis]) would help, in fact the layering issues involved in building COMPOUNDs by NFS make such a mechanism unworkable.bounded. However, typical NFS version 4 clients rarely issue such problematic requests. In practice,they behave in much more predictable ways, in fact most still support the traditional rsize/wsize mount parameters. Therefore, mostNFS version 4 clientsfunction over RPC-over-RDMAbehave inthe same way as NFS versions 2 and 3, operationally. There are however advantages to allowing both clientmuch more predictable ways. Rsize andserver to operate with prearranged size constraints, for example, use of the sizeswsize apply tobetter manageCOMPOUND operations by capping theserver's response cache.total amount of data payload allowed in each COMPOUND. An extension to NFS version 4 supporting amorecomprehensive exchange of upper-layer message size parameters is part of [RFC5661].5.1.4.2. NFS Version 4 Callbacks The NFS version 4 protocols support server-initiated callbacks toselected clients, in order tonotifythemclients of events such as recalleddelegations, etc. These callbacks presentdelegations. There are noparticular issue to being framed over RPC-over-RDMA since such callbacks do not carry bulkDDP-eligible datasuch as NFS READ or NFS WRITE. They MAY be transmitted inline via RDMA_MSG, or if theitems in callbackmessageprotocols associated with NFSv4.0, NFSv4.1, orits reply overflow the negotiated buffer sizes for a callback connection, they MAY be transferred via the RDMA_NOMSG method as described above for other exchanges. One special case is noteworthy: inNFSv4.2. In NFS version4.1, the4.1 and 4.2, callbackchannel is optionally negotiated to beoperations may appear on the same connection as one used for NFS version 4 client requests.In this case, and because the transaction ID (XID) is present in the RPC-over-RDMA header, the client MUST ascertain whether the message is in fact an RPC REPLY, and therefore a reply to a prior request and carrying its XID, before processing it as such. By the same token, the server MUST ascertain whether an incoming messageTo operate onsuch a callback-eligible connection is an RPC CALL, before optionally processing the XID. In the callback case, the XID present in theRPC-over-RDMAheader will potentially have any value, which may (or may not) collide with an XID used by the client for a previous or future request. The client and server MUST inspect the RPC component of the message to determine its potential disposition as either an RPC CALL or RPC REPLY, prior to processing this XID,transports, NFS version 4 clients and servers MUSTNOT reject or accept it without also determininguse theproper context. 6.mechanism described in [I-D.ietf-nfsv4-rpcrdma-bidirection]. 5. IANA Considerations NFS use of direct data placement introduces a need for an additional NFS port number assignment for networks that share traditional UDP and TCP port spaces with RDMA services. The iWARP [RFC5041] [RFC5040] protocol is such an example (InfiniBand is not). NFS servers for versions 2 and 3 [RFC1094] [RFC1813] traditionally listen for clients on UDP and TCP port 2049, and additionally, they register these with the portmapper and/or rpcbind [RFC1833] service. However, [RFC7530] requires NFS servers for version 4 to listen on TCP port 2049, and they are not required to register. An NFS version 2 or version 3 server supporting RPC-over-RDMA on such a network and registering itself with the RPC portmapper MAY choose an arbitrary port, or MAY use the alternative well-known port number for its RPC-over-RDMA service. The chosen port MAY be registered with the RPC portmapper under the netid assigned by the requirement in [I-D.ietf-nfsv4-rfc5666bis]. An NFS version 4 server supporting RPC-over-RDMA on such a network MUST use the alternative well-known port number for its RPC-over-RDMA service. Clients SHOULD connect to this well-known port without consulting the RPC portmapper (as for NFSv4/TCP). The port number assigned to an NFS service over an RPC-over-RDMA transport is available from the IANA port registry [RFC3232].7.6. Security Considerations The RDMA transport for RPC [I-D.ietf-nfsv4-rfc5666bis] supports all RPC [RFC5531] security models, including RPCSEC_GSS [RFC2203] security andlink- leveltransport-level security. The choice of RDMA Read and RDMA Write toreturnconvey RPC argument andresults, respectively,results does not affect this, since it only changes the method of data transfer. Specifically, the requirements of [I-D.ietf-nfsv4-rfc5666bis] ensure that this choice does not introduce new vulnerabilities. Because this document defines only the binding of the NFS protocols atop [I-D.ietf-nfsv4-rfc5666bis], all relevant security considerations are therefore to be described at that layer.8.7. Acknowledgments The author gratefully acknowledges the work of Brent Callaghan and Tom Talpey on the original NFS Direct Data Placement specification [RFC5667]. The author also wishes to thank Bill Baker and Greg Marsden for their support of this work.9.Dave Noveck provided excellent review, constructive suggestions, and consistent navigational guidance throughout the process of drafting this document. Special thanks go to nfsv4 Working Group Chair Spencer Shepler and nfsv4 Working Group Secretary Thomas Haynes for their support. 8. References9.1.8.1. Normative References [I-D.ietf-nfsv4-minorversion2] Haynes, T., "NFS Version 4 Minor Version 2", draft-ietf- nfsv4-minorversion2-41 (work in progress), January 2016. [I-D.ietf-nfsv4-rfc5666bis] Lever, C., Simpson, W., and T. Talpey, "Remote Direct Memory Access Transport for Remote Procedure Call, Version One", draft-ietf-nfsv4-rfc5666bis-07 (work in progress), May 2016. [I-D.ietf-nfsv4-rpcrdma-bidirection] Lever, C., "Bi-directional Remote Procedure Call On RPC- over-RDMA Transports", draft-ietf-nfsv4-rpcrdma- bidirection-05 (work in progress), June 2016. [RFC1833] Srinivasan, R., "Binding Protocols for ONC RPC Version 2", RFC 1833, DOI 10.17487/RFC1833, August 1995, <http://www.rfc-editor.org/info/rfc1833>. [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, DOI10.17487/ RFC2119,10.17487/RFC2119, March 1997, <http://www.rfc-editor.org/info/rfc2119>. [RFC2203] Eisler, M., Chiu, A., and L. Ling, "RPCSEC_GSS Protocol Specification", RFC 2203, DOI 10.17487/RFC2203, September 1997, <http://www.rfc-editor.org/info/rfc2203>. [RFC5531] Thurlow, R., "RPC: Remote Procedure Call Protocol Specification Version 2", RFC 5531, DOI 10.17487/RFC5531, May 2009, <http://www.rfc-editor.org/info/rfc5531>. [RFC5661] Shepler, S., Ed., Eisler, M., Ed., and D. Noveck, Ed., "Network File System (NFS) Version 4 Minor Version 1 Protocol", RFC 5661, DOI 10.17487/RFC5661, January 2010, <http://www.rfc-editor.org/info/rfc5661>. [RFC7530] Haynes, T., Ed. and D. Noveck, Ed., "Network File System (NFS) Version 4 Protocol", RFC 7530, DOI 10.17487/RFC7530, March 2015, <http://www.rfc-editor.org/info/rfc7530>.9.2.8.2. Informative References[I-D.ietf-nfsv4-rfc5666bis] Lever, C., Simpson, W., and T. Talpey, "Remote Direct Memory Access Transport for Remote Procedure Call, Version One", draft-ietf-nfsv4-rfc5666bis-07 (work in progress), May 2016.[RFC1094] Nowicki, B., "NFS: Network File System Protocol specification", RFC 1094, DOI 10.17487/RFC1094, March 1989, <http://www.rfc-editor.org/info/rfc1094>. [RFC1813] Callaghan, B., Pawlowski, B., and P. Staubach, "NFS Version 3 Protocol Specification", RFC 1813, DOI10.17487/ RFC1813,10.17487/RFC1813, June 1995, <http://www.rfc-editor.org/info/rfc1813>. [RFC3232] Reynolds, J., Ed., "Assigned Numbers: RFC 1700 is Replaced by an On-line Database", RFC 3232, DOI 10.17487/RFC3232, January 2002, <http://www.rfc-editor.org/info/rfc3232>. [RFC5040] Recio, R., Metzler, B., Culley, P., Hilland, J., and D. Garcia, "A Remote Direct Memory Access Protocol Specification", RFC 5040, DOI 10.17487/RFC5040, October 2007, <http://www.rfc-editor.org/info/rfc5040>. [RFC5041] Shah, H., Pinkerton, J., Recio, R., and P. Culley, "Direct Data Placement over Reliable Transports", RFC 5041, DOI 10.17487/RFC5041, October 2007, <http://www.rfc-editor.org/info/rfc5041>.[RFC5666] Talpey, T. and B. Callaghan, "Remote Direct Memory Access Transport for Remote Procedure Call", RFC 5666, DOI 10.17487/RFC5666, January 2010, <http://www.rfc-editor.org/info/rfc5666>.[RFC5667] Talpey, T. and B. Callaghan, "Network File System (NFS) Direct Data Placement", RFC 5667, DOI 10.17487/RFC5667, January 2010, <http://www.rfc-editor.org/info/rfc5667>. Author's Address Charles Lever (editor) Oracle Corporation 1015 Granger Avenue Ann Arbor, MI 48104 USA Phone: +1 734 274 2396 Email: chuck.lever@oracle.com