Replacing the SANs is cost prohibitive.
On Fri, Nov 23, 2012 at 10:24 AM, Tim Cook <t...@cook.ms> wrote: > > > On Fri, Nov 23, 2012 at 9:49 AM, John Baxter <johnleebax...@gmail.com>wrote: > >> >> We have the need to encypt our data, approximately 30TB on three ZFS >> volumes under Solaris 10. The volumes currently reside on iscsi sans >> connected via 10Gb/s ethernet. We have tested Solaris 11 with ZFS encrypted >> volumes and found the performance to be very poor and have an open bug >> report with Oracle. >> >> We are a Linux shop and since performance is so poor and still no >> resolution, we are considering ZFS on Linux with dm-crypt. >> I have read once or twice that if we implemented ZFS + dm-crypt we would >> loose features, however which features are not specified. >> We currently mirror the volumes across identical iscsi sans with ZFS and >> we use hourly ZFS snapshots to update our DR site. >> >> Which features of ZFS are lost if we use dm-crypt? My guess would be they >> are related to raidz but unsure. >> >> > > Why don't you just use a SAN that supports full drive encryption? There > should be basically 0 performance overhead. > > --Tim >
_______________________________________________ zfs-discuss mailing list zfs-discuss@opensolaris.org http://mail.opensolaris.org/mailman/listinfo/zfs-discuss
