On Fri, Nov 23, 2012 at 9:49 AM, John Baxter <johnleebax...@gmail.com>wrote:
> > We have the need to encypt our data, approximately 30TB on three ZFS > volumes under Solaris 10. The volumes currently reside on iscsi sans > connected via 10Gb/s ethernet. We have tested Solaris 11 with ZFS encrypted > volumes and found the performance to be very poor and have an open bug > report with Oracle. > > We are a Linux shop and since performance is so poor and still no > resolution, we are considering ZFS on Linux with dm-crypt. > I have read once or twice that if we implemented ZFS + dm-crypt we would > loose features, however which features are not specified. > We currently mirror the volumes across identical iscsi sans with ZFS and > we use hourly ZFS snapshots to update our DR site. > > Which features of ZFS are lost if we use dm-crypt? My guess would be they > are related to raidz but unsure. > > Why don't you just use a SAN that supports full drive encryption? There should be basically 0 performance overhead. --Tim
_______________________________________________ zfs-discuss mailing list zfs-discuss@opensolaris.org http://mail.opensolaris.org/mailman/listinfo/zfs-discuss
