SMBv1 Gateway/Proxy

[xxigab]

Hello, I have a question for the Truenas Community. Haven't done anything with Truenas, hence my question. I have the following request.
We need a SMBv1 proxy which is sharing a NFS or SMBv3 shared folder for old clients with SAMBA SMBv1 share.
Preferably a HA solution. See image.
Has anyone already realized such a solution with Truenas? Please provide brief info.

 

[anodos]

Using the NFS client on TrueNAS is not supported.

 

[xxigab]

Hello anodos,
is it not possible since a specific version? because i have found some forum post where user describe how to mount nfs shares on older truenas.

 

[anodos]

Hello anodos,
is it not possible since a specific version? because i have found some forum post where user describe how to mount nfs shares on older truenas.

No. Just because something is possible for a forums user by working around our design, doesn't mean that it's a good idea to deploy in production environment. This is because such a configuration has a legitimate risk of breaking on upgrades.

Our SMB sharing is designed _only_ to be backed by ZFS or glusterfs (in case of gluster). A client NFS mount will be flagged as an unsupported filesystem and you will be prevented from creating such a share.

 

[anodos]

Additionally, SMB1 will eventually be deprecated in TrueNAS (maybe not for another couple of years, but it's still going to eventually happen).

 

[Patrick M. Hausen]

Hopefully Supermicro's IPMI will support SMB2 by then

 

[anodos]

Hopefully Supermicro's IPMI will support SMB2 by then

Hah. You're funny.

We track upstream samba. https://wiki.samba.org/index.php/Samba_Release_Planning

Angelfish + 13.0 are on 4.15 (4.15 is EOL 03/2023)
BlueFin is on 4.17. (4.17 is EOL in 03/2024)

So probably beginning of next year I'll start porting 4.17 to FreeBSD (major 4.17 bugs should be squashed by then).
4.17 currently has SMB1 support, but building with it is optional (we currently exercise that option).

 

[xxigab]

Hello ,thx for explaination.
Smb1 is need for the shopfloor clients, we have some of them and we need to provide shares. We know about the security risk, but the old Systems need it.

 

[anodos]

Hello ,thx for explaination.
Smb1 is need for the shopfloor clients, we have some of them and we need to provide shares. We know about the security risk, but the old Systems need it.

It's important to remember that all SMB1 clients are not equally bad. BlueFin already deprecates MS-DOS clients (including Windows 9x IIRC).