Date: Thu, 23 Apr 2009 19:53:35 -0400 From: Alexander Kabaev <kabaev@gmail.com> To: Scott Burns <scott@bqinternet.com> Cc: freebsd-fs@freebsd.org Subject: Re: UFS2 metadata checksums Message-ID: <20090423195335.521db0a7@kan.dnsalias.net> In-Reply-To: <49F048FB.6000401@bqinternet.com> References: <49F048FB.6000401@bqinternet.com>
next in thread | previous in thread | raw e-mail | index | archive | help
--Sig_/vUEWaOp4GWXxjRiu=mqaDuN Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable On Thu, 23 Apr 2009 06:54:51 -0400 Scott Burns <scott@bqinternet.com> wrote: > Hi guys, >=20 > I have spent some time writing a kernel module which calculates a=20 > checksum of a UFS2 dinode structure and stores it in the reserved > space of the inode when writing it to disk. It is then verified when > the inode is read from disk. If the checksum verification fails, the > read returns an error (currently EIO). >=20 > I believe that protecting metadata integrity is important, especially > as storage capacity grows. Bitrot is a fact of life, and bad things > can happen if the kernel acts on a corrupted inode. Not only does > this module improve the stability of a server, but it also helps to > prevent additional damage to the filesystem that can be caused by > metadata corruption. >=20 > I'm aware that data integrity issues are addressed with ZFS, but=20 > unfortunately ZFS is still not yet suitable for many workloads. I'm=20 > also aware that integrity checking can be done by using GELI between > the filesystem and the disk, but at a noticeable cost in performance > and space utilization. The method this module uses is fast and does > not use any additional space. Most importantly, it builds on mature > code that has worked well for decades. >=20 > Before I spend much more time on it, I have some questions: >=20 > 1) Has anyone else done any work in this area? >=20 > 2) Is there a demand for this in FreeBSD? >=20 This is actually something I would love to have in the base system, but inodes are not the only structures that need the integrity protection. Pretty much every other metadata block, from cylinder group blocks to indirect blocks for files need similar protection for this to be of real use. -- Alexander Kabaev --Sig_/vUEWaOp4GWXxjRiu=mqaDuN Content-Type: application/pgp-signature; name=signature.asc Content-Disposition: attachment; filename=signature.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.11 (FreeBSD) iD8DBQFJ8P+EQ6z1jMm+XZYRAlf7AKDsiq2qamcMl6ZoRrBMM+by6xf3tACffWL3 wU6B/Po61UtBOiAZ3NSQfF0= =bZaN -----END PGP SIGNATURE----- --Sig_/vUEWaOp4GWXxjRiu=mqaDuN--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20090423195335.521db0a7>