The performance is a separate issue. The bigger problem is that in the process of fixing a bug, OpenZFS incompatibly changed their on-disk encrypted format without realizing it at the time. Illumos had ported the zfs encryption prior to this bug fix, so we still use the older incompatible format. Unfortunately, OpenZFS also did not offer any solution for dealing with the older encrypted datasets aside from ‘delete and recreate all your old encrypted datasets’.
I have a solution for illumos that fixes that so either format can be used, but I really haven’t had time to finish it and go through the whole review and integration process. It works, but it still needs an ‘escape hatch’ to support creating encrypted datasets using either format as well as automated tests. From: Icos <ivcos...@gmail.com> Date: Thursday, May 15, 2025 at 9:33 AM To: illumos-discuss <discuss@lists.illumos.org> Subject: [discuss] ZFS native encryption status Hello, I recently stumbled upon this issue https://www.illumos.org/issues/4896. If I understand it properly, does it means that ZFS native encryption under Illumos is currently quite slow?. Besides this, I wanted to ask if we are compatible with OpenZFS encrypted datasets, as in: can I zfs send and encrypted datasets from Illumos to, for example, a FreeBSD host for backup?. illumos<https://illumos.topicbox.com/latest> / illumos-discuss / see discussions<https://illumos.topicbox.com/groups/discuss> + participants<https://illumos.topicbox.com/groups/discuss/members> + delivery options<https://illumos.topicbox.com/groups/discuss/subscription> Permalink<https://illumos.topicbox.com/groups/discuss/Ta2162fbb2358fa0e-M33e5f65a2831f11c3a277afa> ------------------------------------------ illumos: illumos-discuss Permalink: https://illumos.topicbox.com/groups/discuss/Ta2162fbb2358fa0e-M3685291f4273fe7bcd6bdb68 Delivery options: https://illumos.topicbox.com/groups/discuss/subscription
