Replacing the SANs is cost prohibitive.
On Fri, Nov 23, 2012 at 10:24 AM, Tim Cook <t...@cook.ms> wrote:
> On Fri, Nov 23, 2012 at 9:49 AM, John Baxter <johnleebax...@gmail.com>wrote:
>> We have the need to encypt our data, approximately 30TB on three ZFS
>> volumes under Solaris 10. The volumes currently reside on iscsi sans
>> connected via 10Gb/s ethernet. We have tested Solaris 11 with ZFS encrypted
>> volumes and found the performance to be very poor and have an open bug
>> report with Oracle.
>> We are a Linux shop and since performance is so poor and still no
>> resolution, we are considering ZFS on Linux with dm-crypt.
>> I have read once or twice that if we implemented ZFS + dm-crypt we would
>> loose features, however which features are not specified.
>> We currently mirror the volumes across identical iscsi sans with ZFS and
>> we use hourly ZFS snapshots to update our DR site.
>> Which features of ZFS are lost if we use dm-crypt? My guess would be they
>> are related to raidz but unsure.
> Why don't you just use a SAN that supports full drive encryption? There
> should be basically 0 performance overhead.
zfs-discuss mailing list