Date: Mon, 6 Apr 2009 16:19:18 +0200 (CEST) From: Oliver Fromme <olli@lurza.secnetix.de> To: freebsd-questions@FreeBSD.ORG, modulok@gmail.com Subject: Re: gmirror THEN geli, correct? Message-ID: <200904061419.n36EJIsB047211@lurza.secnetix.de> In-Reply-To: <64c038660904051158s56ef5e82m51ca3c545770487@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Modulok <modulok@gmail.com> wrote: > I'm looking for a confirmation on the order: When setting up a (root > partiton) gmirror+geli, what is the propper order? e.g: gmirror the > disks and THEN initialize geli on the /dev/mirror partitions? Is this > correct? You can also do it the other way round. Both ways are possible and have different advantages and disadvantages. I think most people install gmirror first and put geli on top of it. The advantage of this is that it's more efficient, because data passes through geli only once for encryption when writing to the mirror. If you install geli first on both disks and then put gmirror on top of both geli instances, all data has to be encrypted twice when writing to the disk (for reading it doesn't make a difference), so it is less efficient. However, this setup has the advantage that gmirror will correctly detach one drive when its geli instance detects data corruption (if integrity verification is enabled). Best regards Oliver -- Oliver Fromme, secnetix GmbH & Co. KG, Marktplatz 29, 85567 Grafing b. M. Handelsregister: Registergericht Muenchen, HRA 74606, Geschäftsfuehrung: secnetix Verwaltungsgesellsch. mbH, Handelsregister: Registergericht Mün- chen, HRB 125758, Geschäftsführer: Maik Bachmann, Olaf Erb, Ralf Gebhart FreeBSD-Dienstleistungen, -Produkte und mehr: http://www.secnetix.de/bsd "If you aim the gun at your foot and pull the trigger, it's UNIX's job to ensure reliable delivery of the bullet to where you aimed the gun (in this case, Mr. Foot)." -- Terry Lambert, FreeBSD-hackers mailing list.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200904061419.n36EJIsB047211>