Show HN: Cloud Storage with ZFS send and receive over SSH

Re:Show HN: Cloud Storage with ZFS send and receive over SSH by doublerebel on Tuesday July 28, 2015 @03:28PM (#9963948)

I've been going over beginning a ZFS storage service for a long time, however two technical problems have held me back so far:

  * ZFS send/receive does not support pause/resume

  * SSH overhead may be overkill especially if the ZFS data is already encrypted

Therefore:

  * Do you have any plans to solve these issues?

  * Have you found them to be a problem in production?

  * Do you support encrypted ZFS?

[ Parent | on HN ]

Re:Show HN: Cloud Storage with ZFS send and receive over SSH by tjfontaine on Tuesday July 28, 2015 @03:37PM (#9963988)

OpenZFS resumable send/receive is coming soon http://blog.delphix.com/matt/2015/03/25/resumable-zfs-sendre...

[ Parent | on HN ]

Re:Show HN: Cloud Storage with ZFS send and receive over SSH by gtirloni on Tuesday July 28, 2015 @04:28PM (#9964258)

However, the tank/home/darren@snap1 stream is not encrypted during the send process.

http://docs.oracle.com/cd/E26502_01/html/E29007/gkkih.html

That's for Solaris only though. I wouldn't expected any other implementations to have on-the-fly encryption of that kind. So OpenSSH is unlikely to be adding overhead on that front.

[ Parent | on HN ]

Re:Show HN: Cloud Storage with ZFS send and receive over SSH by alcari on Tuesday July 28, 2015 @03:45PM (#9964043)

Nobody outside of Oracle supports encrypted ZFS, and that's probably not going to change any time soon (I'd love to be wrong, though).

[ Parent | on HN ]

Re:Show HN: Cloud Storage with ZFS send and receive over SSH by feld on Tuesday July 28, 2015 @05:48PM (#9964743)

Their ZFS encryption is vulnerable to watermarking attacks, so most people don't want to see it publicly used anyway.

[ Parent | on HN ]

Re:Show HN: Cloud Storage with ZFS send and receive over SSH by stock_toaster on Tuesday July 28, 2015 @04:51PM (#9964389)

While a bit cumbersome and arguably suboptimal, at least on FreeBSD you can use geli+zfs to get full disk encryption.

[ Parent | on HN ]

Re:Show HN: Cloud Storage with ZFS send and receive over SSH by alcari on Tuesday July 28, 2015 @05:21PM (#9964567)

Sure, but that doesn't help in the context of zfs send, which serializes at the filesystem level for transport. The stream is still going to be in plain text. In fact, Oracle's ZFS still sends the stream decrypted and decompressed, even if those properties are enabled.

[ Parent | on HN ]