I use dm-crypt'ed devices and build ZFS array on top of them. how does it compare to quite opposite approach: creating ZFS, creating ZVOL out of it and then encrypt ZVOL with dm-crypt? are there any pros or cons for each approach?
one thing that comes to my head is that using ZFS over dm-crypt one needs to open few dm-crypt mapper devices separately first and CPU has more work to do while doing multiple encryption. for dm-crypt over ZFS I guess that it would require only one dm-crypt mapper device being open for ZVOL so that CPU would have less work while doing encryption. any others?
I would appreciate you opinion on pros and cons and thoughts from own experience on the subject.
thank you,
geos
This is the old XigmaNAS forum in read only mode,
it will taken offline by the end of march 2021!
I like to aks Users and Admins to rewrite/take over important post from here into the new fresh main forum!
Its not possible for us to export from here and import it to the main forum!
it will taken offline by the end of march 2021!
I like to aks Users and Admins to rewrite/take over important post from here into the new fresh main forum!
Its not possible for us to export from here and import it to the main forum!
encrypted ZFS - pros and cons for two approaches?
-
geos
- NewUser

- Posts: 10
- Joined: 23 Mar 2017 23:18
- Status: Offline
- b0ssman
- Forum Moderator

- Posts: 2438
- Joined: 14 Feb 2013 08:34
- Location: Munich, Germany
- Status: Offline
Re: encrypted ZFS - pros and cons for two approaches?
nas4free uses geli not dm-crypt.
Nas4Free 11.1.0.4.4517. Supermicro X10SLL-F, 16gb ECC, i3 4130, IBM M1015 with IT firmware. 4x 3tb WD Red, 4x 2TB Samsung F4, both GEOM AES 256 encrypted.