6.0.1

Table Of Contents
n
NFS 4.1 does not support hardware acceleration. This limitation does not allow you to create thick
virtual disks on NFS 4.1 datastores.
n
NFS 4.1 supports the Kerberos authentication protocol to secure communication with the NFS server.
For more information, see “Using Kerberos Credentials for NFS 4.1,” on page 158.
n
NFS 4.1 uses share reservations as a locking mechanism.
n
NFS 4.1 supports inbuilt le locking.
n
NFS 4.1 supports nonroot users to access les when used with Kerberos.
n
NFS 4.1 supports traditional non-Kerberos mounts. In this case, use security and root access guidelines
recommended for NFS version 3.
n
Does not support simultaneous AUTH_SYS and Kerberos mounts.
n
NFS 4.1 with Kerberos does not support IPv6. NFS 4.1 with AUTH_SYS supports both IPv4 and IPv6.
NFS Protocols and vSphere Solutions
vSphere Features NFS version 3 NFS version 4.1
vMotion and Storage vMotion Yes Yes
High Availability (HA) Yes Yes
Fault Tolerance (FT) Yes Yes
Distributed Resource Scheduler (DRS) Yes Yes
Host Proles Yes Yes
Storage DRS Yes No
Storage I/O Control Yes No
Site Recovery Manager Yes No
Virtual Volumes Yes No
NFS Version Upgrades
vSphere does not support automatic datastore conversions from NFS version 3 to NFS 4.1. If you want to
upgrade your NFS 3 datastore, the following options are available:
n
You can create a new NFS 4.1 datastore, and then use Storage vMotion to migrate virtual machines from
the old datastore to the new one.
n
Use conversion methods provided by your NFS storage server. For more information, contact your
storage vendor.
n
Unmount from one version and then mount as the other.
C If you use this option, make sure to unmount the datastore from all hosts that have access to
the datastore. The datastore can never be mounted by using both protocols at the same time.
Firewall Configurations for NFS Storage
ESXi includes a rewall between the management interface and the network. The rewall is enabled by
default. At installation time, the ESXi rewall is congured to block incoming and outgoing trac, except
trac for the default services, such as NFS.
Supported services, including NFS, are described in a rule set conguration le in the ESXi rewall
directory /etc/vmware/firewall/. The le contains rewall rules and lists each rule's relationship with ports
and protocols.
Chapter 16 Working with Datastores
VMware, Inc. 155