> NFS seems like the easiest option but its ancient and insecure over the network.
r.e. old: nfsv4 is a different beast than nfs3;
r.e. secure: these things don't hold true with krb5 auth.
r.e. old: nfsv4 is a different beast than nfs3;
r.e. secure: these things don't hold true with krb5 auth.
sftp gives you really good key based authentication and encryption over the network. I wouldn't trust NFS for anything other than a highly secure internal network.
https://wiki.debian.org/NFS/Kerberos
krb5p is pretty secure. You just need a Kerberos implementation. The alternative is to run NFS over Stunnel, which is what Amazon does for EFS.