Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm installing CentOS 6.1 on a server and exploring the encryption settings in combination with software RAID.

  • Should I encrypt the drive partition, the software RAID device, or both?
  • Should I encrypt swap?

Wondering the pros/cons of each approach in case I mentally missed something.


share|improve this question

What sense should there be in encrypting both the md device and the underlying block device? It just slows things down.

Also, when using a RAID and encrypting the physical device, you would effectively encrypting the same set of data multiple times, again slowing things down.

As for encrypted Swap space: There can be intersting data in swapped out memory, but it depends on your threat model. If I would use encrypted disks, I would also encrypt swap space.

share|improve this answer
OK so should I encrypt the partition or the MD device? – Rob Olmos Dec 16 '11 at 18:47
@RobOlmos: Did you actually read my answer? If you encrypt the basic physical devices (possibly the partitions) of a software RAID, you will need to do the encryption multiple times, without any security benefit. – Sven Dec 16 '11 at 18:51
@RobOlmos: Also, you should work on your accept ratio. – Sven Dec 16 '11 at 18:54

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.