<div>Hi,</div><div><br></div><div>I just wonder if I can use DRBD to asynchronously mirror two block devices locally.</div><div><br></div><div>For example I want to have a primary (dedicated, so quite secure) server and on the other hand secondary (VPS, so quite insecure).</div>
<div><br></div><div>I want to mirror block devices, but I want to keep it encrypted on VPS, but not on dedicated server.</div><div><br></div><div>Sure I can set encrypted partition up on VPS and share it via DRBD, but then the encryption key will need to be entered and will be stored in the RAM on VPS.</div>
<div><br></div><div>Better is to map plain block device from secondary server on the primary server, setup the encrypted partition there (thus encryption key never leave the primary server) and then setup data mirroring locally.</div>
<div><br></div><div>I imagine that it is possible with NBD and RAID, but:</div><div>1. I'm worrying if NBD network protocol is stable enough.</div><div>2. This will be synchronized mirroring.</div><div>3. What about resynch? Is it have intelligent algorithm to make it fast and save bandwidth?</div>
<div><br></div><div>Is it possible with DRBD?</div><div><br></div><div>Thanks,</div><div>dmg</div>