We use our own hardware at Fastmail

Re:We use our own hardware at Fastmail by _bare_metal on Sunday December 22, 2024 @08:55AM (#42486327)

in case you want to ballpark-estimate your move off of the cloud

Bonus points: I'm a Fastmail customer, so it tangentially tracks

----

Quick note about the article: ZFS encryption can be flaky, be sure you know what you're doing before deploying for your infrastructure.

Relevant Reddit discussion: https://www.reddit.com/r/zfs/comments/1f59zp6/is_zfs_encrypt...

A spreadsheet of related issues that I can't remember who made:

https://docs.google.com/spreadsheets/d/1OfRSXibZ2nIE9DGK6sww...

[ Parent | on HN ]

Re:We use our own hardware at Fastmail by brongondwana on Sunday December 22, 2024 @05:53PM (#42489886)

Yeah, we know about the ZFS encryption with send/receive bug, it's frustrating our attempts to get really nice HA support on our logging system... but so far it appears that just deleting the offsending snapshot and creating a new one works, and we're funding some research into the issue as well.

This is the current script - it runs every minute for each pool synced between the two log servers: https://gist.github.com/brong/6a23fee1480f2d62b8a18ade5aea66...

[ Parent | on HN ]

Re:We use our own hardware at Fastmail by _bare_metal on Monday December 23, 2024 @09:09AM (#42494473)

Thanks for sharing!

[ Parent | on HN ]

Re:We use our own hardware at Fastmail by sneak on Sunday December 22, 2024 @06:17PM (#42490009)

My main issue with ZFS encryption is that it only supports one key.

LUKS2 has something like 9 key slots.

I run ZoL over LUKS2 and it works great.

[ Parent | on HN ]