Hi,
I tried my SSD with luks and it is damn slow. I don't have any numbers for i/o per
second but the read/write speed was <50% of the speed without luks. If you want
encryption and speed you have to use loopaes. Unfortunetly you have to patch your
util-linux for that.
The advantage of loopaes is that it is more secure then luks and way faster.
The speed with encryption (loopaes) is about 90-95% the speed without encryption at
my setup.
Best regards,
Felix
On 30. December 2011 - 14:49, Billy Crook wrote:
> Date: Fri, 30 Dec 2011 14:49:06 -0600
> From: Billy Crook <billycrook@xxxxxxxxx>
> To: Sandra Schlichting <littlesandra88@xxxxxxxxx>
> Cc: linux-btrfs@xxxxxxxxxxxxxxx
> Subject: Re: Encryption implementation like ZFS?
>
> On Fri, Dec 30, 2011 at 14:12, Sandra Schlichting
> <littlesandra88@xxxxxxxxx> wrote:
> >> How is this advantageous over dmcrypt-LUKS?
> >
> > TRIM pass-through for SSD's. With dmcrypt on an SSD write performance
> > is very slow.
>
> Good point. I'm actually very close to moving from magnetic to SSD
> storage for my btrfs volumes. Would my luks layer offset the majority
> of any advantage I might otherwise see from SSD? I'd be happy just to
> eliminate seektime.
>
> > cryptsetup-1.4.0-1 have --enable-discards option to allow
> > discards/TRIM, but it is not recommended for theoretical security
> > reasons.
> >
> > From my understanding some btrfs features wouldn't work with dmcrypt,
> > like "online volume growth and shrinking"?
>
> I've been using btrfs on luks now for 6 months and online grow works
> fine -- if you online grow the luks container first. (cryptsetup
> resize <name>) It does make it a more manual process, I suppose, but
> for me it's worth knowing that no part of the filesystem, will ever be
> available should a disk be stolen.
> --
> To unsubscribe from this list: send the line "unsubscribe linux-btrfs" in
> the body of a message to majordomo@xxxxxxxxxxxxxxx
> More majordomo info at http://vger.kernel.org/majordomo-info.html
---end quoted text---
--
To unsubscribe from this list: send the line "unsubscribe linux-btrfs" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
