Amazon FSx for OpenZFS Features

Amazon FSx for OpenZFS lets you independently set your storage and performance capacity to customize your file system for your specific workload needs. You can scale your storage capacity provisioned throughput and SSD IOPs at any time to adapt your file system as your needs evolve.

Amazon FSx for OpenZFS is powered by the popular OpenZFS file system, which was designed to provide high levels of storage efficiency. Amazon FSx for OpenZFS supports the latest Zstandard and LZ4 compression technologies, which can help you reduce your storage costs for high-performance FSx for OpenZFS file systems and backup storage. It also supports multiple data containers (volumes) per file system, thin provisioning, and user or group storage quotas to enable you to efficiently support multiple teams, applications, and use cases within a single file system.

With Amazon FSx, you pay only for the resources you use. You are billed for file systems based on the storage capacity (per GB-month), SSD IOPS (per IOPS-month), and throughput capacity (per MBps-month) that you provision. You are billed by the second, ensuring that you only pay for resources for the period of time when you’re using them.

Amazon FSx for OpenZFS provides full support for NFS v3, v4.0, v4.1, and v4.2 to help you migrate your NFS-based or other ZFS-based on-premises applications and storage to AWS, and build new cloud-native applications easily using a simple, highly available, high-performance NFS endpoint.

Amazon FSx for OpenZFS file systems supports thousands of simultaneous clients running in Amazon Elastic Compute Cloud (Amazon EC2), Amazon Elastic Container Service (Amazon ECS), Amazon Elastic Kubernetes Service (Amazon EKS), VMware Cloud on AWS, Amazon WorkSpaces, and Amazon AppStream 2.0 instances.

With Amazon FSx for OpenZFS, you can access file systems from another VPC (including a VPC in another region) using AWS Transit Gateway or VPC Peering, and you can access file systems from on premises using AWS Direct Connect or VPN.

Amazon FSx for OpenZFS provides rich ZFS capabilities for working with data, like point-in-time snapshots, in-place data cloning, and on-demand data replication across file systems, all available natively via the FSx console or API. With snapshots, you can easily track historical versions of your data and applications, and restore these versions with a click of a button. With data cloning, you can instantly clone data in place to quickly test features and changes without interrupting your existing users or applications, and without needing to duplicate your data. With on-demand data replication across file systems, you can easily and efficiently transfer incremental point-in-time snapshots of your volumes to another file system within or across AWS regions and/or accounts, without the extra work of establishing connectivity between your file systems or detecting and handling network interruptions.

With Amazon FSx for OpenZFS, you have full flexibility and control over how you administer your file systems. You can manage your file systems using the AWS Management Console, AWS Command Line Interface (AWS CLI), and AWS SDK.

With Amazon FSx for OpenZFS, you can easily control who can administer your file systems, volumes, and backups—such as create, update, and delete—using AWS Identity and Access Management (IAM). You can monitor storage and performance metrics using Amazon CloudWatch, monitor and secure API calls using AWS CloudTrail and IAM, and manage file systems using AWS CloudFormation.

Amazon FSx for OpenZFS automatically takes highly durable, daily file-system backups to Amazon S3. You can modify your backup schedule, take additional backups of your file system, or restore your existing backups to a new file system at any time. Backups are point-in-time consistent, incremental, easy to manage, and quick to create and restore. To provide additional layers of data protection and meet business continuity, disaster recovery, and compliance requirements, you can also copy these file system backups across AWS Regions.

Amazon FSx for OpenZFS supports near instant point-in-time volume snapshots that are stored directly within your file system. End users can easily restore volumes to past snapshots, or even undo changes and compare versions of individual files or directories.

Amazon FSx offers two high-availability (HA) deployment options: a single-Availability-Zone deployment option, Single-AZ (HA), that provides continuous availability to data in the event of a file server failure or connectivity loss, and a multi-Availability Zone deployment option, Multi-AZ (HA), that additionally replicates data across two AZs to provide high availability and durability even in the event of an AZ-wide disruption. During planned maintenance, or in the event of a failure of the active file server or its AZ, Amazon FSx automatically fails over to the standby so you can resume file system operations without a loss of availability to your data.

Amazon FSx for OpenZFS supports on-demand data replication across file systems. By scheduling regular, incremental replication to a second file system, you can implement an active–passive disaster recovery solution with an RTO as low as 5 minutes. Because on-demand replication only transfers incremental changes, you can achieve an RPO as low as 15 minutes for workloads driving up to 2 GB/s of data churn.

All Amazon FSx for OpenZFS file system data is automatically encrypted at rest using keys managed with AWS Key Management Service (AWS KMS). Data is automatically encrypted in transit with 256-bit encryption when accessed from supported Amazon EC2 instance types.

Amazon FSx for OpenZFS is integrated with IAM, which lets you control who can administer your file systems, volumes, and backups (create, update, delete, etc.). You can also tag your Amazon FSx for OpenZFS resources and control the actions that your IAM users and groups can take based on those tags.

Amazon FSx for OpenZFS is integrated with IAM, which lets you control who can administer your file systems, volumes, and backups (create, update, delete, etc.). You can also tag your Amazon FSx for OpenZFS resources and control the actions that your IAM users and groups can take based on those tags.

You can monitor and secure API calls using AWS CloudTrail and IAM and detect and flag suspicious API usage patterns using Amazon GuardDuty.

Amazon FSx for OpenZFS supports POSIX permissions so that you can define fine-grained file- and directory-level access permissions for individual users and groups.

AWS has the longest-running compliance program in the cloud and is committed to helping you navigate your requirements. Amazon FSx for OpenZFS has been assessed to meet global and industry security standards, complying with PCI DSS, ISO 9001, 27001, 27017, and 27018; SOC 1, 2, and 3; in addition to being HIPAA eligible. For more information and resources, visit our compliance page. You can also refer to the Services in Scope by Compliance Program page to see a full list of services and certifications.