Scaling Secure File Access - what's New in Linux SMB3.1.1: Performance, Security, and Beyond
Lafayette
Wed Sep 17 | 9:30am
Abstract
Accessing servers from Linux over SMB3.1.1 continues to improve in exciting ways. This talk will explore the latest enhancements to the Linux SMB3.1.1 client, enabling more secure, efficient, and compatible access to remote storage across a wide range of SMB3 file servers—including Samba, Azure (the "largest server in the world"), ksmbd, Windows, NetApp, and macOS. There are also exciting improvements to smbdirect (SMB over RDMA), including making this high-performance path easier to use for both the client and server, as well as userspace applications like Samba.
Over the past year, major improvements have been made to performance (e.g. smarter use of directory leases, better metadata caching, and multiple netfs enhancements for improved data caching), security (e.g., new authentication mechanisms and better support for password rotation), and POSIX compatibility (including continued testing and improvement of the SMB3.1.1 POSIX Extensions). Support for special file types has been enhanced, and support for several new Linux system calls has been added. The Linux SMB3.1.1 client remains one of the most active filesystems in the kernel, and userspace tooling has also seen significant evolution. This presentation will also highlight recent progress in the in-kernel SMB server (ksmbd), which is rapidly gaining functionality and performance improvements, making it more useful in embedded, testing, and lightweight server scenarios. Attendees will leave with a practical understanding of how to leverage these new features in real workloads—and a preview of what’s coming next for SMB3.1.1 on Linux.
Learning Objectives
Learn how recent enhancements —such as improved directory caching, metadata handling, and netfs integration—can improve remote file access efficiency for Linux workloads Understand the latest performance, security, and Linux compatibility enhancements in the Linux SMB3.1.1 client Gain insights into recent developments in SMB over RDMA (smbdirect) in Linux and its unified support across client, server (ksmbd.ko), and userspace Explore the recent improvements to the in-kernel SMB server (ksmbd) and how it fits into lightweight and embedded Linux storage scenarios
Download PDF
Related Sessions
File Systems & Protocols
USMB2: An SMB2/3 client for extremely constrained targets.
USMB2 is a userspace SMB2/3 client for extremely constrained platforms, such as Z80 class machines.
It supports NTLMv2 authentication, mapping shares, opening/reading/writing files with full unicode for share and file names.
This presentation will go through how to design and implement a SMB2/3 client for extremely CPU and RAM constrained systems. What featureset is feasible for 8-bit machines, how and what tweaks are required to make it all work.
File Systems & Protocols
The in-kernel Linux NFS server in 2026
This presentation recaps the features and capabilities added to the upstream Linux in-kernel NFS server from kernels 6.14 through 7.2, covering areas such as dynamic thread pool scaling and the use of server-side O_DIRECT. It will also highlight upcoming additions and the directions driving active development — giving attendees a practical understanding of where the server stands today and where it is headed.
File Systems & Protocols
New Transports in Samba: QUIC and SMBDirect, with High-Speed I/O via io_uring
The Linux kernel is about to get native quic and smbdirect support. This talk covers the current status of merging these features into upstream Linux and Samba projects. By the time of the conference most things should be ready to use, so this will also outline what still could be optimized, regarding cpu usage, avoiding memory copy and latency.
File Systems & Protocols
SMB3 POSIX Extensions, from Plumbing to Flowing
SMB3 POSIX Extensions bring first-class POSIX semantics to SMB, and are now fully implemented and documented across Samba, ksmbd, and the Linux kernel client in their latest stable releases.
This session walks administrators through enabling and using these capabilities in real-world deployments. We conclude by presenting the new home of the protocol specification and outlining how to stay involved as it evolves.
File Systems & Protocols
Samba in 2026
Samba development has not stopped since SDC 2025:
* SMB over RDMA shows spectacular transfer rates
* The connection ceph and ceph/rgw has improved
* Security of Active Directory protocols has been tightened
* Samba has done development to follow Microsoft on its way to get rid of NTLM
* Entra ID authentication over SMB is an area of active development
* Samba will work better with fuse-based file systems
This talk will present the highlights of latest Samba developments in the above and possibly other areas
File Systems & Protocols
Fibre Channel Update - Security, Speed, and AI!
The Fibre Channel Channel community began the year with the introduction of 128GFC products, but that's not all! With the release the third generation Security Protocols, Fibre Channel enters a new era of secure fabric solutions. Add to that the completion of the FC-RDMA specification and Fibre Channel lays the groundwork for integration with AI solutions for Fibre Channel SANs. The Fibre Channel team is also pushing ahead on the Gen 9 Fibre Channel specification to deliver 256GFC in the near future.
Now is the time to step back a bit and view the Fibre Channel roadmap. In this session, we discuss the success of the next generation security specifications (FC-SP-3), the technical challenges associated with the creation of 256GFC products, and the impact AI will have on Fibre Channel solutions. Come explore the excitement around FC-SP-3 "Autonomous In-flight encryption" (AIE) that provide a plug-n-play solution for end-to-end security! Take a look at the expansion of Fabric Notifications to produce automated responses to disruptions in the network. Let's see where Fibre Channel is taking you!
We look forward to sharing with you the innovations in Fibre Channel!
