# Keep RAID-Z fault tolerance separate from OpenZFS expansion capacity

> Review RAID-Z expansion for its capacity benefit without assuming a higher fault-tolerance level.

- Canonical URL: https://update.dsesecurity.com/updates/keep-raid-z-fault-tolerance-separate-from-openzfs-expansion-capacity/
- Publisher: Detection Systems & Engineering (DSE Security)
- Author: DSE Security Editorial Team
- Published: 2026-10-15T13:32:45+00:00
- Modified: 2026-10-15T13:36:15+00:00
- Last reviewed by DSE: 2026-10-15
- Resource type: Guide
- DSE priority: Information
- Topics: Business Continuity, IT
- Reading time: 2 minutes

## What you need to know

Review RAID-Z expansion for its capacity benefit without assuming a higher fault-tolerance level.

## Potentially affected

This applies specifically to RAID-Z expansion documented for OpenZFS 2.3. It does not imply that earlier releases, appliance firmware, or every storage management interface supports the same procedure.

## DSE recommendation

DSE recommends stating whether the objective is more usable capacity or a different fault-tolerance level before approving expansion.

## Article

Review RAID-Z expansion for its capacity benefit without assuming a higher fault-tolerance level.

## Source facts

OpenZFS 2.3 supports attaching a device to a RAID-Z group to expand its capacity. The expansion reads allocated data and redistributes it across the enlarged group. It does not increase the number of device failures that the RAID-Z level can tolerate. If a device fails during expansion, expansion pauses until the group’s health is restored. Existing blocks retain their previous data-to-parity ratio, while new blocks use the expanded ratio. A pool-wide scrub follows completed expansion.

Source: [OpenZFS 2.3 — zpool attach](https://openzfs.github.io/openzfs-docs/man/v2.3/8/zpool-attach.8.html).

## Applicability

This applies specifically to RAID-Z expansion documented for OpenZFS 2.3. It does not imply that earlier releases, appliance firmware, or every storage management interface supports the same procedure.

## DSE recommendation

DSE recommends stating whether the objective is more usable capacity or a different fault-tolerance level before approving expansion. Record current pool health, independent recovery coverage, device identities, and the feature support of the actual deployment. Explain that old-block accounting may differ from a newly created wider group. Schedule supervision for a long-running operation and define the response if a disk fails. Keep the expansion and the concluding scrub in the same change record.

## Verification

Use a representative test pool to observe expansion progress and the final scrub. Compare reported capacity with the original layout and the mix of old and new allocations. Confirm the team can explain the unchanged RAID-Z failure tolerance before accepting the production plan.

## Official reference

[OpenZFS 2.3 — zpool attach](https://openzfs.github.io/openzfs-docs/man/v2.3/8/zpool-attach.8.html). Reviewed October 15, 2026.

## Primary reference

- Name: OpenZFS 2.3 — zpool attach
- Authority: openzfs.github.io
- URL: https://openzfs.github.io/openzfs-docs/man/v2.3/8/zpool-attach.8.html
- Source publication date: Not stated by the source

## Citation and use

Preferred citation: “Keep RAID-Z fault tolerance separate from OpenZFS expansion capacity,” DSE Security, https://update.dsesecurity.com/updates/keep-raid-z-fault-tolerance-separate-from-openzfs-expansion-capacity/
Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/
Usage and citation policy: https://update.dsesecurity.com/usage/
Copyright © 2026 Detection Systems & Engineering. All rights reserved.