Conversation

Notices

1. Embed this notice
   Ryan Castellucci (they/them) :nonbinary_flag: (ryanc@infosec.exchange)'s status on Monday, 26-Jan-2026 04:02:24 JST Ryan Castellucci (they/them) :nonbinary_flag:
   # zpool list -v tank
   NAME SIZE ALLOC FREE CKPOINT EXPANDSZ FRAG CAP DEDUP HEALTH ALTROOT
   tank 89.0T 15.1T 73.9T - - 0% 16% 1.00x ONLINE -
   raidz3-0 87.3T 14.9T 72.4T - - 0% 17.1% - ONLINE
   crypt-slot-l0 7.28T - - - - - - - ONLINE
   crypt-slot-r0 7.28T - - - - - - - ONLINE
   crypt-slot-l1 7.28T - - - - - - - ONLINE
   crypt-slot-r1 7.28T - - - - - - - ONLINE
   crypt-slot-l2 7.28T - - - - - - - ONLINE
   crypt-slot-r2 7.28T - - - - - - - ONLINE
   crypt-slot-l3 7.28T - - - - - - - ONLINE
   crypt-slot-r3 7.28T - - - - - - - ONLINE
   crypt-slot-l4 7.28T - - - - - - - ONLINE
   crypt-slot-r4 7.28T - - - - - - - ONLINE
   crypt-slot-l5 7.28T - - - - - - - ONLINE
   crypt-slot-r5 7.28T - - - - - - - ONLINE
   special - - - - - - - - -
   mirror-2 1.64T 121G 1.52T - - 0% 7.21% - ONLINE
   crypt-slot-cd-part4 1.65T - - - - - - - ONLINE
   crypt-slot-cu-part4 1.65T - - - - - - - ONLINE
   crypt-slot-cl-part4 1.65T - - - - - - - ONLINE
   logs - - - - - - - - -
   mirror-1 31.5G 188K 31.5G - - 0% 0.00% - ONLINE
   crypt-slot-cd-part3 32.0G - - - - - - - ONLINE
   crypt-slot-cu-part3 32.0G - - - - - - - ONLINE
   crypt-slot-cl-part3 32.0G - - - - - - - ONLINE
   
   • Embed this notice
     Ryan Castellucci (they/them) :nonbinary_flag: (ryanc@infosec.exchange)'s status on Monday, 26-Jan-2026 04:17:30 JST Ryan Castellucci (they/them) :nonbinary_flag:

     in reply to

     • Louis Vallat

     @louis the disks are all using LUKS

   • Embed this notice
     Louis Vallat (louis@social.louis-vallat.dev)'s status on Monday, 26-Jan-2026 04:17:34 JST Louis Vallat

     in reply to

     @ryanc@infosec.exchange crypt-slot? :neocat_think:

   • Embed this notice
     Ryan Castellucci (they/them) :nonbinary_flag: (ryanc@infosec.exchange)'s status on Monday, 26-Jan-2026 04:53:26 JST Ryan Castellucci (they/them) :nonbinary_flag:

     in reply to

     • Louis Vallat

     @louis ZFS encryption performance is bad.

   • Embed this notice
     Louis Vallat (louis@social.louis-vallat.dev)'s status on Monday, 26-Jan-2026 04:53:27 JST Louis Vallat

     in reply to

     @ryanc@infosec.exchange so not giving ZFS raw access to the disks? :distraught: what about ZFS encryption? :neocat_pleading:

   • Embed this notice
     Ryan Castellucci (they/them) :nonbinary_flag: (ryanc@infosec.exchange)'s status on Monday, 26-Jan-2026 09:19:47 JST Ryan Castellucci (they/them) :nonbinary_flag:

     in reply to

     • Louis Vallat

     @louis It's on an older Atom CPU that doesn't have AVX instruction set support, so it's a bit shit. It's fine on my laptop with a recent CPU.

   • Embed this notice
     Louis Vallat (louis@social.louis-vallat.dev)'s status on Monday, 26-Jan-2026 09:19:49 JST Louis Vallat

     in reply to

     @ryanc@infosec.exchange even recently (and on modern hardware)? I haven't seen any performance (latency or throughout) degradation on SSDs or HDDs on modern-ish hardware :noted:

   • Embed this notice
     Ryan Castellucci (they/them) :nonbinary_flag: (ryanc@infosec.exchange)'s status on Monday, 26-Jan-2026 09:55:03 JST Ryan Castellucci (they/them) :nonbinary_flag:

     in reply to

     • Louis Vallat

     @louis It has a QAT coprocessor that supports AES-GCM, but that's still a bottleneck for some reason.

   • Embed this notice
     Louis Vallat (louis@social.louis-vallat.dev)'s status on Monday, 26-Jan-2026 09:55:05 JST Louis Vallat

     in reply to

     @ryanc@infosec.exchange aaaaaaaaaah gotcha'! :neocat_cool_fingerguns: makes more sense then (although a bit cursed) :bleh:

   • Embed this notice
     Ryan Castellucci (they/them) :nonbinary_flag: (ryanc@infosec.exchange)'s status on Tuesday, 03-Feb-2026 06:33:40 JST Ryan Castellucci (they/them) :nonbinary_flag:

     in reply to

     • Louis Vallat
     • GermanoMassullo

     @louis @GermanoMassullo I have receipts.

   • Embed this notice
     Ryan Castellucci (they/them) :nonbinary_flag: (ryanc@infosec.exchange)'s status on Tuesday, 03-Feb-2026 06:33:40 JST Ryan Castellucci (they/them) :nonbinary_flag:

     in reply to

     • Louis Vallat
     • GermanoMassullo

     @louis @GermanoMassullo less flippantly, the performance is shit on the box I need it to run on

   • Embed this notice
     GermanoMassullo (germanomassullo@mastodon.social)'s status on Tuesday, 03-Feb-2026 06:33:41 JST GermanoMassullo

     in reply to

     • Louis Vallat

     @ryanc @louis nope