I use luks encryption a lot although not on rhel 5.5 but its the same thing. Its possible to encrypt everything except /boot, and when running top I could see dm-crypt was barely taking up any and cpu load or throughput. If you want to resize a logical volume though, then it has to be done at the command line and include the cryptsetup command, s-c-lvm can't handle encrypted volumes. https://bugzilla.redhat.com/show_bug.cgi?id=517759
On Mon, Dec 6, 2010 at 10:54 AM, Musayev, Ilya <[email protected]> wrote: > We are considering encrypting some of our production disks as additional > security measure. We are planning on using 5.5 in production in the near > future. Previously, when 5.5 came out - we tested it in non-prod and > discovered numerous bugs. The level of confidence for 5.5 release dropped > sharply. Nevertheless, the bugs have been resolved and it appears to be > stable now. > > Has anyone used the disk encryption on 5.5 in production? How much > performance degradation (if any) have you experienced? What type of servers > would you put encryption on and what would you avoid? Are you using whole > disk or selected partitions? > > Thank you > -ilya > > > > > > > _______________________________________________ > rhelv5-list mailing list > [email protected] > https://www.redhat.com/mailman/listinfo/rhelv5-list > _______________________________________________ rhelv5-list mailing list [email protected] https://www.redhat.com/mailman/listinfo/rhelv5-list
