4 ms·
I've been looking for an off-site cloud storage provider that takes encrypted zfs sends, so I believe I'm in the target market for this. My use case is a home s
by implying 6y ago
I've been looking for an off-site cloud storage provider that takes encrypted zfs sends, so I believe I'm in the target market for this. My use case is a home storage server with a zpool of several hundred terabytes.
However, there are some product compromises that would preclude me from using this. First, I already manage drive purchases, parity, dealing with scrubs and errors, etc. for my pool. I don't want to duplicate my effort for a second backup pool. ZFS sends are, ultimately just a long binary, and I simply want them stored, without much hassle. If I'm planning a zpool expansion, the work in using this service is now doubled, having to (non-trivially) determine the best pool geometry for my own pool, and for a backup pool made up of differently sized drives.
I also don't understand why someone would want to give you their encryption passphrase. A service like this should just take encrypted sends, and send them back when requested. I don't want my plaintext anywhere other than my own hardware.
That said, your main competitor suffers from all of these problems as well.
- dsp_person 6y ago> I also don't understand why someone would want to give you their encryption passphrase. A service like this should just take encrypted sends, and send them back when requested. I don't want my plaintext anywhere other than my own hardware. it can, see raw sends: e.g. https://news.ycombinator.com/item?id=25148494 https://news.ycombinator.com/item?id=25148494
- seized 6y agoZFS encrypted datasets allow for raw sends, the target server never needs the decryption key. To securely restore you would need to be able to ZFS send back to yourself first.