Home / server / Questions / 341441
In Process
Rob Olmos
Asked: 2011-12-16 18:02:50 +0800 CST

Filesystem encryption settings during install?

  • 772

I'm installing CentOS 6.1 on a server and exploring the encryption settings in combination with software RAID.

  • Should I encrypt the drive partition, the software RAID device, or both?
  • Should I encrypt swap?

Wondering the pros/cons of each approach in case I mentally missed something.

Thanks

centos redhat partition encryption software-raid

1 Answers

  1. What sense should there be in encrypting both the md device and the underlying block device? It just slows things down.

    Also, when using a RAID and encrypting the physical device, you would effectively encrypting the same set of data multiple times, again slowing things down.

    As for encrypted Swap space: There can be intersting data in swapped out memory, but it depends on your threat model. If I would use encrypted disks, I would also encrypt swap space.

    • 0