SOLVED Encryption for only part of disk

[perfopt]

I have gone over cyberjocks very useful presentation for newbies. I understand vdev and zpool but I am not sure if what I want is doable.

I have a FreeNAS system with 6 disks and the system is configured in RAIDZ2. I need only a small portion of the data encrypted. I don't want to pay the power or performance (though it is supposedly small for a system with AES-NI) so I don't want all the data encrypted.

From the presentation I understand that encryption applies to the entire zpool and cannot be done selectively. I have only one vdev (6 HDDs in RAIDZ2) so I can create only one zpool.

So if I have only one vdev (and therefore only 1 zpool) I cannot selectively encrypt data? Or is there a way around this?

Thanks

 

[cyberjock]

Nope, you encrypt the whole pool or none of it. There's nothing stopping you from storing an encrypted container file on the server though.

 

[perfopt]

Thanks. I ended up enabling encryption for the spool. I still have to do the bit about backing up keys.

 

[jgreco]

You should do that sooner rather than later.