As a special use-case I would propose to do the encryption inside the qemu-rbd driver (similar to the qcow2 driver). This would also encrypt the network traffic from the KVM host to the osd.
I know that this is probably not the generic aproach for on disk encryption, but it would provide some extra secuity for the "EBS" user. Is there someone working on this / do others have interest in this solution? Christian -- To unsubscribe from this list: send the line "unsubscribe ceph-devel" in the body of a message to [email protected] More majordomo info at http://vger.kernel.org/majordomo-info.html
