logoalt Hacker News

ahartmetz • today at 2:15 PM • 3 replies • view on HN

I'm not sure if ksmbd still makes all that much sense. A user-space daemon can saturate almost any network link using a single CPU core. And the attack surface... if you control ksmbd, you immediately own the machine.


Replies

loeg • today at 3:54 PM

> A user-space daemon can saturate almost any network link using a single CPU core.

Not 200Gbps of 16kB block writes, that's for sure.

Agree with you on the rest about kernel vs userspace, just taking issue with the bit about a single CPU core.

➕ show 1 reply
tomega2134 • today at 7:58 PM

Even if I did have a requirement that SMB saturate a network, I would probably still not want it to be implemented in the kernel.

14u2c • today at 3:24 PM

> A user-space daemon can saturate almost any network link using a single CPU core.

Certainly not a guarantee at today's link speeds. We're increasingly leaning into RDMA and other forms of offloading for a reason.

➕ show 1 reply