Simon Burge wrote:
"Perry E. Metzger" wrote:[ ... ] Encrypted swap should be the default -- either using cgd or by simply encrypting the blocks as they go in and out without using the cgd layer.You've benchmarked the effect of this, especially on older hardware?
Let's first have it as an option that is very easy to enable/disable, ie., /etc/rc.d/cgd_swap start. Once that's in current, I'm sure people with various hardware configurations will be happy to switch it on just for benchmarking and then back off. I doubt Perry alone, or anyone for that matter, can cover as much ground... -e.