This is the old XigmaNAS forum in read only mode,
it will taken offline by the end of march 2021!



I like to aks Users and Admins to rewrite/take over important post from here into the new fresh main forum!
Its not possible for us to export from here and import it to the main forum!

encrypted ZFS - pros and cons for two approaches?

Forum rules
Set-Up GuideFAQsForum Rules
Post Reply
geos
NewUser
NewUser
Posts: 10
Joined: 23 Mar 2017 23:18
Status: Offline

encrypted ZFS - pros and cons for two approaches?

Post by geos »

I use dm-crypt'ed devices and build ZFS array on top of them. how does it compare to quite opposite approach: creating ZFS, creating ZVOL out of it and then encrypt ZVOL with dm-crypt? are there any pros or cons for each approach?

one thing that comes to my head is that using ZFS over dm-crypt one needs to open few dm-crypt mapper devices separately first and CPU has more work to do while doing multiple encryption. for dm-crypt over ZFS I guess that it would require only one dm-crypt mapper device being open for ZVOL so that CPU would have less work while doing encryption. any others?

I would appreciate you opinion on pros and cons and thoughts from own experience on the subject.

thank you,
geos

User avatar
b0ssman
Forum Moderator
Forum Moderator
Posts: 2438
Joined: 14 Feb 2013 08:34
Location: Munich, Germany
Status: Offline

Re: encrypted ZFS - pros and cons for two approaches?

Post by b0ssman »

nas4free uses geli not dm-crypt.
Nas4Free 11.1.0.4.4517. Supermicro X10SLL-F, 16gb ECC, i3 4130, IBM M1015 with IT firmware. 4x 3tb WD Red, 4x 2TB Samsung F4, both GEOM AES 256 encrypted.

Post Reply

Return to “ZFS (only!)”