Ceph default OSD encryption

[paradox55]

What is it?

Because when I manually define XFS with AES256 in the ceph.conf and recreate the cluster my rand performance drops from 1200MB/s to ~500MB/s compared to the native encryption proxmox comes with.

 

[dcsapak]

since ceph-volume does not touch any cipher/encryption schemes but uses cryptsetup, i guess whatever is configured by default for luks/cryptsetup (here it is 'aes-xts-plain64' with a keysize of 512 bit )
how did you configure this in the ceph conf, since it seems i cannot find anything in the ceph documentation about it...