In 2018, I wrote an article on pushing NFSv4 through stunnel, resulting in NFS over TLS. Emails between NFS kernel developers indicate that this is <i>much</i> faster than Kerberos, and the RSA key setup that I published was adopted in RFC-9289 (which I assume also addresses the performance issue).<p><a href="https://www.linuxjournal.com/content/encrypting-nfsv4-stunnel-tls" rel="nofollow">https://www.linuxjournal.com/content/encrypting-nfsv4-stunne...</a><p>Edit: Some time after I published, one of the RFC authors outlined the NFS architectural changes in a blog post.<p><a href="https://blogs.oracle.com/linux/post/encrypting-nfs-data-on-the-wire" rel="nofollow">https://blogs.oracle.com/linux/post/encrypting-nfs-data-on-t...</a>