Understand the differences between FreeBSD GELI disk encryption and OpenZFS native encryption

Beginning with version 13.0, #FreeBSD supports the long-anticipated #OpenZFS native #encryption feature. If you’ve used FreeBSD’s #GELI encryption in the past, you may have questions regarding the differences between the two encryption schemes, whether you should switch to OpenZFS native encryption, and how to implement it in your environment.

This article begins by summarizing the user-facing differences between FreeBSD GELI #disk encryption and OpenZFS native encryption, covering their benefits and limitations. It then provides examples for creating and managing encrypted #datasets.

https://klarasystems.com/articles/openzfs-native-encryption/

OpenZFS Native Encryption

Starting with 13.0, FreeBSD supports OpenZFS native encryption. Learn more about how native encryption is different from GELI, what benefits it adds, how to create encrypted databases, and more.

^{Klara Inc}