Garrett, Yes! We have several customers who was looking for encrypted storage solution with ZFS in the past. We are all in hosting or data center business.
Since it is not available, they end up to buy other solutions in the market like MegaRAID with Seagate SED disk. If you can have full disk encryption at SW level or having tool mange key with physical SED disk, it will be great and fit with their requirement Rocky -----Original Message----- From: Garrett D'Amore [mailto:[email protected]] Sent: Tuesday, March 26, 2013 8:16 AM To: [email protected] Subject: Re: [discuss] Fw: [solarisx86] ZFS and encryption On Mar 26, 2013, at 7:19 AM, Apostolos Syropoulos <[email protected]> wrote: > >> >> T his isn't native ZFS encryption. FreeNAS is using FreeBSD's >> existing crypto infrastructure to insert an encrypted block device >> shim between ZFS and the disk drives. The same is possible on >> illumos systems using lofi(7) with encryption, then building a zpool >> atop the lofi device(s). > > Maybe but it is better than nothing! Actually, while lofi works, it is a horrible, horrible hack fraught with lots of problems because it doesn't sit on top of the block layer, but rather on the filesystem layer. As I think about this, it would be nearly trivial to build an encrypting block layer on top of regular block devices using the blkdev framework I wrote ages ago. Should only take a weekend or so to code up. Can I have a show of hands for people who would really like to have full disk encryption (not per dataset!) ? I mean really would like to run this in production. If the number is non-zero, then I'll probably look at writing some code. Would be a fun little project. - Garrett > > A.S. > > > ---------------------- > Apostolos Syropoulos > Xanthi, Greece > http://obelix.ee.duth.gr/~apostolo > http://asyropoulos.wordpress.com > http://hypercomputation.blogspot.com/ > > > ------------------------------------------- > illumos-discuss > Archives: https://www.listbox.com/member/archive/182180/=now > RSS Feed: > https://www.listbox.com/member/archive/rss/182180/22003744-9012f59c > Modify Your Subscription: https://www.listbox.com/member/?&; Powered by > Listbox: http://www.listbox.com ------------------------------------------- illumos-discuss Archives: https://www.listbox.com/member/archive/182180/=now RSS Feed: https://www.listbox.com/member/archive/rss/182180/21175751-e450dce1 Modify Your Subscription: https://www.listbox.com/member/?&; Powered by Listbox: http://www.listbox.com ------------------------------------------- illumos-discuss Archives: https://www.listbox.com/member/archive/182180/=now RSS Feed: https://www.listbox.com/member/archive/rss/182180/21175430-2e6923be Modify Your Subscription: https://www.listbox.com/member/?member_id=21175430&id_secret=21175430-6a77cda4 Powered by Listbox: http://www.listbox.com
