On Jan 4, 2013, at 4:41 PM, Andras Korn <korn@xxxxxxxxxxxxxxxxxxxxxxx> wrote: > > The filesystem is the "application": it's zfsonlinux. I'm putting it on > RAID10 instead of using the disks natively because I want to encrypt it > using LUKS, and encrypting each disk separately seemed wasteful of CPU (I > only have 3 cores). > > I realize that I forsake some of the advantages of zfs by putting it on an > mdraid array. I would not do this, you eliminate not just some of the advantages, but all of the major ones including self-healing. Your choices are: dmcrypt/LUKS (ZFS on encrypted logical device) ecryptfs (encrypted fs on top of ZFS) Nearline (or enterprise) drives that have self-encryption The only way ZFS can self-heal is if it directly manages its own mirrored copies or its own parity. To use ZFS in the fashion you're suggesting I think is pointless, so skip using md or LVM. And consider the list in reverse order as best performing, with your idea off the list entirely. Three cores? Does it have AES-NI? If it does, it adds maybe 2% overhead for encryption, although I can't tell if you off hand if that's per disk. Chris Murphy -- To unsubscribe from this list: send the line "unsubscribe linux-raid" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
