Date: Fri, 22 Jul 2016 09:27:37 -0500 From: Karl Denninger <karl@denninger.net> To: freebsd-fs@freebsd.org Subject: Re: ZFS, SSD and encryption Message-ID: <b8b000ff-289c-7348-8b63-00f3ac51accf@denninger.net> In-Reply-To: <CAJPDrRtLBNKr4BynSGMRfFGdAR0ZbDuwfcqkLupvk5HtgqrbQg@mail.gmail.com> References: <CAJPDrRtLBNKr4BynSGMRfFGdAR0ZbDuwfcqkLupvk5HtgqrbQg@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --] On 7/22/2016 07:48, Nikos Kastanas wrote: > I have a Lenovo X220 laptop running FreeBSD 10.3-RELEASE with ZFS and > encryption on a plain HDD. I am considering buying a Samsung Pro 850 SSD to > boost performance but I am not sure if TRIM and ZFS+Encryption work well > together. After some research online, I found *this page* > <https://www.freebsd.org/doc/faq/all-about-zfs.html>which states the > following: > > *Note: * > ZFS TRIM may not work with all configurations, such as a ZFS filesystem on > a GELI-backed device. > > From what I can understand from the above note, I should not use the > encryption option when installing FreeBSD with ZFS on an SSD. TRIM will not > work correctly and therefore the SSD performace will be impacted. Meh. Simply not true. The reason for the "supported feature" flag here is that this machine was recently rolled forward to 11.0-BETA1, but I have not upgraded the pools yet from the feature set of 10.2. [karl@NewFS ~]$ zpool status zsr pool: zsr state: ONLINE status: Some supported features are not enabled on the pool. The pool can still be used, but some features are unavailable. action: Enable all features using 'zpool upgrade'. Once this is done, the pool may no longer be accessible by software that does not support the features. See zpool-features(7) for details. scan: scrub repaired 0 in 0h6m with 0 errors on Sun Jul 17 03:12:01 2016 config: NAME STATE READ WRITE CKSUM zsr ONLINE 0 0 0 mirror-0 ONLINE 0 0 0 da8p4.eli ONLINE 0 0 0 da9p4.eli ONLINE 0 0 0 errors: No known data errors [karl@NewFS ~]$ gpart show da8 => 34 468862061 da8 GPT (224G) 34 2014 - free - (1.0M) 2048 1024 1 freebsd-boot (512K) 3072 1024 - free - (512K) 4096 20971520 2 freebsd-zfs [bootme] (10G) 20975616 134217728 3 freebsd-swap (64G) 155193344 313667584 4 freebsd-zfs (150G) 468860928 1167 - free - (584K) da8: <ATA INTEL SSDSC2BP24 0420> Fixed Direct Access SPC-4 SCSI device da8: Serial Number BTJR41210025240AGN da8: 600.000MB/s transfers da8: Command Queueing enabled da8: 228936MB (468862128 512 byte sectors) root@NewFS:/var/log # sysctl -a|grep trim vfs.zfs.trim.max_interval: 1 vfs.zfs.trim.timeout: 30 vfs.zfs.trim.txg_delay: 32 vfs.zfs.trim.enabled: 1 vfs.zfs.vdev.trim_max_pending: 10000 vfs.zfs.vdev.trim_max_active: 64 vfs.zfs.vdev.trim_min_active: 1 vfs.zfs.vdev.trim_on_init: 1 kstat.zfs.misc.zio_trim.failed: 0 kstat.zfs.misc.zio_trim.unsupported: 25748 kstat.zfs.misc.zio_trim.success: 6120223 kstat.zfs.misc.zio_trim.bytes: 295371051008 And as you can see, TRIM is definitely working (on the devices that can handle it); there are also spinning rust disks in this machine, thus the "unsupported" reports as well. HOWEVER, I do suggest (strongly!) that you NOT use the particular SSD you are intending to buy as it has no power-loss protection. Instead, buy an Intel 730-series drive (that's what's in this machine); it has that protection and it is *EXTREMELY IMPORTANT* as otherwise any power event has the potential of silent corruption which is catastrophic -- especially on an encrypted volume! That same machine has two other 730s running a Postgresql database (also Geli-encrypted) and they're just fine in terms of their wear leveling and such; the media "wearout" indicator shows that 95% of the device's life remains and they currently have 10,000 power-on-hours. They'll wear out in something like another 20 years at present use rates.... :) The 480MB version of that drive is currently available for roughly $250. It is not the fastest SSD out there but the differences between it and others are small and I have *verified* that the power-loss data protection works on these units. IMHO they're the only "consumer" style priced devices that I find acceptable for this reason; the S3500/S3700s are good too, but a hell of a lot more money and unless you need the write endurance IMHO not worth it. The 730 series hits the sweet spot in that it has power-loss protection that *works* and yet they're reasonably priced. I own a bunch of them; they're in my production servers under FreeBSD and also on my Win10 desktop machine. -- Karl Denninger karl@denninger.net <mailto:karl@denninger.net> /The Market Ticker/ /[S/MIME encrypted email preferred]/ [-- Attachment #2 --] 0 *H 010 `He 0 *H _0[0C)0 *H 010 UUS10UFlorida10U Niceville10U Cuda Systems LLC10UCuda Systems LLC CA1"0 *H Cuda Systems LLC CA0 150421022159Z 200419022159Z0Z10 UUS10UFlorida10U Cuda Systems LLC10UKarl Denninger (OCSP)0"0 *H 0 X@vkY Tq/vE]5#֯MX\8LJ/V?5Da+ sJc*/r{ȼnS+ w")ąZ^DtdCOZ ~7Q '@a#ijc۴oZdB&!Ӝ-< ?HN5y 5}F|ef"Vلio74zn">a1qWuɖbFeGE&3(KhixG3!#e_XƬϜ/,$+;4y'Bz<qT9_?rRUpn5 Jn&Rx/p Jyel*pN8/#9u/YPEC)TY>~/˘N[vyiDKˉ,^" ?$T8 v&K%z8C @?K{9f`+@,|Mbia 007++0)0'+0http://cudasystems.net:88880 U0 0 `HB0U0, `HB OpenSSL Generated Certificate0U-h\Ff Y0U#0$q}ݽʒm50U0karl@denninger.net0 *H Owbabɺx&Uk[(Oj!%p MQ0I!#QH}.>~2&D}<wm_>V6v]f>=Nn+8;q wfΰ/RLyUG#b}n!Dր_up|_ǰc/%ۥ nN8:d;-UJd/m1~VނיnN I˾$tF1&}|?q?\đXԑ&\4V<lKۮ3%Am_(q-(cAeGX)f}-˥6cv~Kg8m~v;|9:-iAPқ6ېn-.)<[$KJtt/L4ᖣ^Cmu4vb{+BG$M0c\[MR|0FԸP&78"4p#}DZ9;V9#>Sw"[UP7100010 UUS10UFlorida10U Niceville10U Cuda Systems LLC10UCuda Systems LLC CA1"0 *H Cuda Systems LLC CA)0 `He M0 *H 1 *H 0 *H 1 160722142737Z0O *H 1B@֢Pѳi4yJ.rZ2; ue[B/۩ٟc>hT0l *H 1_0]0 `He*0 `He0 *H 0*H 0 *H @0+0 *H (0 +710010 UUS10UFlorida10U Niceville10U Cuda Systems LLC10UCuda Systems LLC CA1"0 *H Cuda Systems LLC CA)0*H 1010 UUS10UFlorida10U Niceville10U Cuda Systems LLC10UCuda Systems LLC CA1"0 *H Cuda Systems LLC CA)0 *H -;&pKT%4Q: ,3QTQärV}̣m|؞9Y)!8I"v`$SŵA<3(®+åU%C.0)PthGh{_\ՄXWē#Qe1X Fd<3Rh(DHI/ZMhUON; BJ55Q_"y糱~H*JG;--vgd3P]"8Tb}22@'DV:/tieu)H9ҏ ȡu9xcc銚q~K>[~e%JWia틥WF[LYՕ.z^2eE?`ST,AHKw gO<Z6ytɩ$BUv3 ɇj[ΏPa[G's8쟙iuਁnp!Mk;
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?b8b000ff-289c-7348-8b63-00f3ac51accf>
