Re: Encrypted zfs?

From: Pawel Jakub Dawidek <pjd_at_FreeBSD.org>
Date: Wed, 29 Aug 2007 09:44:47 +0200
On Wed, Aug 29, 2007 at 11:35:50AM +0400, Dmitry Morozovsky wrote:
> On Tue, 28 Aug 2007, Pawel Jakub Dawidek wrote:
> 
> PJD> On Tue, Aug 28, 2007 at 12:34:11PM +0100, Hugo Silva wrote:
> PJD> > How's the performance on the geli-backed pool ?
> PJD> 
> PJD> It depends a lot on CPU speed, but you should be ready for visible
> PJD> performance drop. I'll give you two examples:
> 
> [examples snipped]
> 
> PJD> But don't you worry, when you must have encryption, you don't really
> PJD> care about performance. And when you decided not to use encryption,
> PJD> because it introduces too big overhead, it only means that you didn't
> PJD> need encryption in the first place:)
> 
> Well, I suppose most usage patterns imply that only part of data really needs 
> encryption (as only part really needs copies>1 or compression), hence it would 
> be *extremely* useful if one can ``zfs set encryption=on tank/home/joe''
> (could it be done via pluggable geom modules or something?)

No, it can't be done that way. You cannot put a GEOM module inside ZFS.
The good news is that ZFS encryption support is in development.

-- 
Pawel Jakub Dawidek                       http://www.wheel.pl
pjd_at_FreeBSD.org                           http://www.FreeBSD.org
FreeBSD committer                         Am I Evil? Yes, I Am!

Received on Wed Aug 29 2007 - 05:46:04 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:39:16 UTC