Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 14 Nov 2011 23:50:54 +0000
From:      RW <rwmaillists@googlemail.com>
To:        freebsd-questions@freebsd.org
Subject:   Re: geli + journal
Message-ID:  <20111114235054.7c1e96c3@gumby.homeunix.com>
In-Reply-To: <908814265.20111115000600@yandex.ru>
References:  <1274456846.20111114215728@yandex.ru> <20111114205141.2bf80ae1@gumby.homeunix.com> <908814265.20111115000600@yandex.ru>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 15 Nov 2011 00:06:00 +0200
Коньков Евгений wrote:

>catch idea, but some question:
> in this situation .eli.journal  journal device will not be encrypted?
>  can you describe how data flow will be?

The journal is encrypted unless you choose to put it on a separate
non-encrypted device. 

In principle the data is encrypted into the journal, decrypted from
the journal and then re-encrypted into its final location. In practice
I've found that in file copying between disks, writing uses about
twice as much cpu time as reading, so maybe the decryption  from the
journal can be avoided by caching.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20111114235054.7c1e96c3>