XCP-ng Encrypted Storage Repository on UNAS

Computer Hardware & Server Infrastructure Builds
1

I was torn between posting on the UI community or XCP-ng, so here’s my first post here where I can see both world.

I wanted an encrypted Storage Repository for XCP-ng without encrypting VMs at the OS level or buying server-grade equipment.

One solution I found was OpenMediaVault and using disk encryption with LUKS. It works great, no problem here.

However, I wanted to use a UNAS, which doesn’t support disk encryption. It does support share encryption, but NFS is disabled.

So, I used SMB for my Storage Repository on encrypted shares, and to my surprise, it works really well. It’s almost as good as NFS on an unencrypted share.

My question is, is there something I’m missing? In my opinion, SMB is pretty reliable.

My setup: UNAS 2 with 1 disk WD Red Pro 8TB. I’m only using it for storing backup (not XO, some homemade solution) and store Continuous Replication, so I don’t really need redundancy.

2

I have not done much testing with SMB in XCP-ng but overall NFS is usually faster, but I have not done a lot of head to head comparison on the UNAS. As always make sure you have a good backup in case something goes wrong.

3

Thanks for your reply.
My guess on the matter is that the chipset used on the UNAS 2 is fast enough in encryption to not make a real difference between NFS or SMB when using spinning disk ( ARM Cortex-A55 4 Core 2124 MHz Benchmark ).
I just wanted to put down somewhere what I found for achieving encryption-at-rest for XCP-ng SR, because I find this UNAS solution to be very cheap and very straightforward to set up (compared to Synology which would require more clicks to achieve that).

PS: Yes, I got other backup too.