Encrypted zfs?

[Pawel Jakub Dawidek]

On Wed, Aug 29, 2007 at 11:35:50AM +0400, Dmitry Morozovsky wrote:
> On Tue, 28 Aug 2007, Pawel Jakub Dawidek wrote:
> 
> PJD> On Tue, Aug 28, 2007 at 12:34:11PM +0100, Hugo Silva wrote:
> PJD> > How's the performance on the geli-backed pool ?
> PJD> 
> PJD> It depends a lot on CPU speed, but you should be ready for visible
> PJD> performance drop. I'll give you two examples:
> 
> [examples snipped]
> 
> PJD> But don't you worry, when you must have encryption, you don't really
> PJD> care about performance. And when you decided not to use encryption,
> PJD> because it introduces too big overhead, it only means that you didn't
> PJD> need encryption in the first place:)
> 
> Well, I suppose most usage patterns imply that only part of data really needs 
> encryption (as only part really needs copies>1 or compression), hence it would 
> be *extremely* useful if one can ``zfs set encryption=on tank/home/joe''
> (could it be done via pluggable geom modules or something?)

No, it can't be done that way. You cannot put a GEOM module inside ZFS.
The good news is that ZFS encryption support is in development.

-- 
Pawel Jakub Dawidek                       http://www.wheel.pl
pjd at FreeBSD.org                           http://www.FreeBSD.org
FreeBSD committer                         Am I Evil? Yes, I Am!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-current/attachments/20070829/13835814/attachment-0001.pgp