After a few hours investigation I have noticed if I switch the encryption algorithm from the default aes-256-gcm to aes-256-ccm then I can get the full 1Gbps read and write speeds with less than 50% CPU. Might be useful for anyone else looking into this.
My favourite AI tells me that CCM is secure and GCM is preferred due to support by hardware acceleration (which the PI doesn't have until someone drops a PR on openzfs).
NB The algorithm can only be set when the dataset is created. The command is
My favourite AI tells me that CCM is secure and GCM is preferred due to support by hardware acceleration (which the PI doesn't have until someone drops a PR on openzfs).
NB The algorithm can only be set when the dataset is created. The command is
Code:
zfs create -o encryption=aes-256-ccm -o keyformat=passphrase pool/dataset_newStatistics: Posted by X69 — Sun Nov 02, 2025 12:06 am