1 |
On Thu, Dec 07, 2017 at 09:49:29PM +0000, Wols Lists wrote: |
2 |
> On 07/12/17 21:37, Frank Steinmetzger wrote: |
3 |
> > Ooooh, I just came up with another good reason for raidz over mirror: |
4 |
> > I don't encrypt my drives because it doesn't hold sensitive stuff. (AFAIK |
5 |
> > native ZFS encryption is available in Oracle ZFS, so it might eventually |
6 |
> > come to the Linux world). |
7 |
> > |
8 |
> > So in case I ever need to send in a drive for repair/replacement, noone can |
9 |
> > read from it (or only in tiny bits'n'pieces from a hexdump), because each |
10 |
> > disk contains a mix of data and parity blocks. |
11 |
> > |
12 |
> > I think I'm finally sold. :) |
13 |
> > And with that, good night. |
14 |
> |
15 |
> So you've never heard of LUKS? |
16 |
> |
17 |
> GPT |
18 |
> LUKS |
19 |
> MD-RAID |
20 |
> Filesystem |
21 |
|
22 |
My new drives are finally here. One of them turned out to be an OEM. -_- |
23 |
The shop says it will cover any warranty claims and it’s not a backyard |
24 |
seller either, so methinks I’ll keep it. |
25 |
|
26 |
To evaluate LUKS, I created the following setup (I just love ASCII-painting |
27 |
in vim ^^): |
28 |
|
29 |
┏━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┓ |
30 |
┃ tmpfs ┃ |
31 |
┃ ┌─────────────┐ ┌─────────────┐ ┌─────────────┐ ┌─────────────┐ ┃ |
32 |
┃ │ 1 GB file │ │ 1 GB file │ │ 1 GB file │ │ 1 GB file │ ┃ |
33 |
┃ └──────┬──────┘ └──────┬──────┘ └──────┬──────┘ └──────┬──────┘ ┃ |
34 |
┃ V V V V ┃ |
35 |
┃ ┌─────────────┐ ┌─────────────┐ ┌─────────────┐ ┌─────────────┐ ┃ |
36 |
┃ │ LUKS device │ │ LUKS device │ │ LUKS device │ │ LUKS device │ ┃ |
37 |
┃ └──────┬──────┘ └──────┬──────┘ └──────┬──────┘ └──────┬──────┘ ┃ |
38 |
┃ V V V V ┃ |
39 |
┃ ┌─────────────────────────────────────────────────────────────┐ ┃ |
40 |
┃ │ RaidZ2 │ ┃ |
41 |
┃ └─────────────────────────────────────────────────────────────┘ ┃ |
42 |
┗━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┛ |
43 |
|
44 |
While dd'ing a 1500 MB file from and to the pool, my NAS Celeron achieved |
45 |
(with the given number of vdevs out of all 4 being encrypted): |
46 |
|
47 |
non-encrypted 2 encrypted 4 encrypted |
48 |
──────────────────────────────────────────────────── |
49 |
read 1600 MB/s 465 MB/s 290 MB/s |
50 |
write ~600 MB/s ~200 MB/s ~135 MB/s |
51 |
scrub time 10 s (~ 100 MB/s) |
52 |
|
53 |
So performance would be juuuust enough to satisfy GBE. I wonder though how |
54 |
long a real scrub/resilver would take. The last scrub of my mirror, which |
55 |
has 3.8 TB allocated, took 9¼ hours. Once the z2 pool is created and the |
56 |
data migrated, I *will* have to do a resilver in any case, because I only |
57 |
have four drives and they will all go into the pool, but two of which |
58 |
currently make up the mirror. |
59 |
|
60 |
|
61 |
I see myself bying an i3 before too long. Talk about first-world problems. |
62 |
-- |
63 |
Gruß | Greetings | Qapla’ |
64 |
Please do not share anything from, with or about me on any social network. |
65 |
|
66 |
When you are fine, don’t worry. It will pass. |