Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 22 Jul 2016 09:27:37 -0500
From:      Karl Denninger <karl@denninger.net>
To:        freebsd-fs@freebsd.org
Subject:   Re: ZFS, SSD and encryption
Message-ID:  <b8b000ff-289c-7348-8b63-00f3ac51accf@denninger.net>
In-Reply-To: <CAJPDrRtLBNKr4BynSGMRfFGdAR0ZbDuwfcqkLupvk5HtgqrbQg@mail.gmail.com>
References:  <CAJPDrRtLBNKr4BynSGMRfFGdAR0ZbDuwfcqkLupvk5HtgqrbQg@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help

[-- Attachment #1 --]

On 7/22/2016 07:48, Nikos Kastanas wrote:
> I have a Lenovo X220 laptop running FreeBSD 10.3-RELEASE with ZFS and
> encryption on a plain HDD. I am considering buying a Samsung Pro 850 SSD to
> boost performance but I am not sure if TRIM and ZFS+Encryption work well
> together. After some research online, I found *this page*
> <https://www.freebsd.org/doc/faq/all-about-zfs.html>which states the
> following:
>
> *Note: *
> ZFS TRIM may not work with all configurations, such as a ZFS filesystem on
> a GELI-backed device.
>
> From what I can understand from the above note, I should not use the
> encryption option when installing FreeBSD with ZFS on an SSD. TRIM will not
> work correctly and therefore the SSD performace will be impacted.
Meh.  Simply not true.  The reason for the "supported feature" flag here
is that this machine was recently rolled forward to 11.0-BETA1, but I
have not upgraded the pools yet from the feature set of 10.2.

[karl@NewFS ~]$ zpool status zsr
  pool: zsr
 state: ONLINE
status: Some supported features are not enabled on the pool. The pool can
        still be used, but some features are unavailable.
action: Enable all features using 'zpool upgrade'. Once this is done,
        the pool may no longer be accessible by software that does not
support
        the features. See zpool-features(7) for details.
  scan: scrub repaired 0 in 0h6m with 0 errors on Sun Jul 17 03:12:01 2016
config:

        NAME           STATE     READ WRITE CKSUM
        zsr            ONLINE       0     0     0
          mirror-0     ONLINE       0     0     0
            da8p4.eli  ONLINE       0     0     0
            da9p4.eli  ONLINE       0     0     0

errors: No known data errors

[karl@NewFS ~]$ gpart show da8
=>       34  468862061  da8  GPT  (224G)
         34       2014       - free -  (1.0M)
       2048       1024    1  freebsd-boot  (512K)
       3072       1024       - free -  (512K)
       4096   20971520    2  freebsd-zfs  [bootme]  (10G)
   20975616  134217728    3  freebsd-swap  (64G)
  155193344  313667584    4  freebsd-zfs  (150G)
  468860928       1167       - free -  (584K)

da8: <ATA INTEL SSDSC2BP24 0420> Fixed Direct Access SPC-4 SCSI device
da8: Serial Number BTJR41210025240AGN
da8: 600.000MB/s transfers
da8: Command Queueing enabled
da8: 228936MB (468862128 512 byte sectors)



root@NewFS:/var/log # sysctl -a|grep trim
vfs.zfs.trim.max_interval: 1
vfs.zfs.trim.timeout: 30
vfs.zfs.trim.txg_delay: 32
vfs.zfs.trim.enabled: 1
vfs.zfs.vdev.trim_max_pending: 10000
vfs.zfs.vdev.trim_max_active: 64
vfs.zfs.vdev.trim_min_active: 1
vfs.zfs.vdev.trim_on_init: 1
kstat.zfs.misc.zio_trim.failed: 0
kstat.zfs.misc.zio_trim.unsupported: 25748
kstat.zfs.misc.zio_trim.success: 6120223
kstat.zfs.misc.zio_trim.bytes: 295371051008


And as you can see, TRIM is definitely working (on the devices that can
handle it); there are also spinning rust disks in this machine, thus the
"unsupported" reports as well.

HOWEVER, I do suggest (strongly!) that you NOT use the particular SSD
you are intending to buy as it has no power-loss protection.  Instead,
buy an Intel 730-series drive (that's what's in this machine); it has
that protection and it is *EXTREMELY IMPORTANT* as otherwise any power
event has the potential of silent corruption which is catastrophic --
especially on an encrypted volume!

That same machine has two other 730s running a Postgresql database (also
Geli-encrypted) and they're just fine in terms of their wear leveling
and such; the media "wearout" indicator shows that 95% of the device's
life remains and they currently have 10,000 power-on-hours.

They'll wear out in something like another 20 years at present use
rates.... :)

The 480MB version of that drive is currently available for roughly
$250.  It is not the fastest SSD out there but the differences between
it and others are small and I have *verified* that the power-loss data
protection works on these units.  IMHO they're the only "consumer" style
priced devices that I find acceptable for this reason; the S3500/S3700s
are good too, but a hell of a lot more money and unless you need the
write endurance IMHO not worth it.

The 730 series hits the sweet spot in that it has power-loss protection
that *works* and yet they're reasonably priced.  I own a bunch of them;
they're in my production servers under FreeBSD and also on my Win10
desktop machine.

-- 
Karl Denninger
karl@denninger.net <mailto:karl@denninger.net>
/The Market Ticker/
/[S/MIME encrypted email preferred]/

[-- Attachment #2 --]
0	*H
010
	`He0	*H
_0[0C)0
	*H
010	UUS10UFlorida10U	Niceville10U
Cuda Systems LLC10UCuda Systems LLC CA1"0 	*H
	Cuda Systems LLC CA0
150421022159Z
200419022159Z0Z10	UUS10UFlorida10U
Cuda Systems LLC10UKarl Denninger (OCSP)0"0
	*H
0
X@vkY
Tq/vE]5#֯MX\8LJ/V?5Da+
sJc*/r{ȼnS+w")ąZ^DtdCOZ ~7Q '@a#ijc۴oZdB&!Ӝ-<	?HN5y
5}F|ef゘"Vلio74zn">a1qWuɖbFeGE&3(KhixG3!#e_XƬϜ/,$+;4y'Bz<qT9_?rRUpn5
Jn&Rx/p Jyel*pN8/#9u/YPEC)TY>~/˘N[vyiDKˉ,^" ?$T8v&K%z8C @?K{9f`+@,|Mbia007++0)0'+0http://cudasystems.net:88880	U00	`HB0U0,	`HB
OpenSSL Generated Certificate0U-h\Ff Y0U#0$q}ݽʒm50U0karl@denninger.net0
	*H
Owbabɺx&Uk[(Oj!%pMQ0I!#QH}.>~2&D}<wm_>V6v]f>=Nn+8;q wfΰ/RLyUG#b}n!Dր_up|_ǰc/%ۥ
nN8:d;-UJd/m1~VނיnN I˾$tF1&}|?q?\đXԑ&\4V<lKۮ3%Am_(q-(cAeGX)f}-˥6cv~Kg8m~v;|9:-iAPқ6ېn-.)<[$KJtt/L4ᖣ^Cmu4vb{+BG$M0c\[MR|0FԸP&78"4p#}DZ9;V9#>Sw"[UP7100010	UUS10UFlorida10U	Niceville10U
Cuda Systems LLC10UCuda Systems LLC CA1"0 	*H
	Cuda Systems LLC CA)0
	`HeM0	*H
	1	*H
0	*H
	1
160722142737Z0O	*H
	1B@֢Pѳi4yJ.rZ2;޶
ue[B/۩ٟc>hT0l	*H
	1_0]0	`He*0	`He0
*H
0*H
0
*H
@0+0
*H
(0	+710010	UUS10UFlorida10U	Niceville10U
Cuda Systems LLC10UCuda Systems LLC CA1"0 	*H
	Cuda Systems LLC CA)0*H
	1010	UUS10UFlorida10U	Niceville10U
Cuda Systems LLC10UCuda Systems LLC CA1"0 	*H
	Cuda Systems LLC CA)0
	*H
-;&pKT%4Q:
,3QTQärV}̣m|؞9Y)!8I"v`$SŵA<3(®+åU%C.0)PthGh{_\ՄXWē#Qe1XFd<3Rh(DHI/ZMhUON;BJ55Q_"y糱~H*JG;--vgd3P]"8Tb}22@'DV:/tieu)H9ҏ ȡu9xcc銚q~K>[~e%JWia틥WF[LYՕ.z^2eE?`ST,AHKw
gO<Z6ytɩ$BUv3
ɇj[ΏPa[G's8쟙iuਁnp!Mk;

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?b8b000ff-289c-7348-8b63-00f3ac51accf>