• Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar

Yellow Bricks

by Duncan Epping

  • Home
  • Unexplored Territory Podcast
  • HA Deepdive
  • ESXTOP
  • Stickers/Shirts
  • Privacy Policy
  • About
  • Show Search
Hide Search

storage rules

vSAN Storage Rules policy capability allows to set dedupe/compression/encryption per VM? The 2026 update!

Duncan Epping · Oct 1, 2026 · Leave a Comment

It seems to be a regularly question, and with most recent releases things have changed once again, so I figured I would rewrite my post and point from the original to this update. So what is the question? When you create an SPBM policy you will see a screen which seem to indicate that certain data services can be enabled on a per VM basis. Those data services would be Encryption, Compression, Deduplication, and Hybrid or All-Flash. This is not the case of course, the Storage Rules section was intended to specify which storage services needed to be enabled (or disabled) for a particular datastore to show up as compatible with the policy.

Now with 9.1 various things have changed, and I want to call this out. First of all, when you have Auto-RAID enabled for the policy you don’t even see all the options any longer.

Now, when you disable Auto-RAID the below is what it looks like.

Confusingly, this seems to indicate that these options were only here for disabling/enabling dataservices, however we now that this is not the case. So let’s clarify what these do and which version does what, as I am mildly confused as well at this point. I created a table which hopefully helps explaining how this works and what does what?!

VersionServiceRuleFunction
All versions
(OSA and ESA)
EncryptionData-At-RestWill only present datastores which have data-at-rest-encryption enabled
All versions
(OSA and ESA)
EncryptionNo encryptionWill only present datastores which have data-at-rest-encryption disabled
All versions
(OSA and ESA)
EncryptionNo preferenceWill present datastores with or without data-at-rest encryption enabled
All versions
(OSA)
Storage tierAll flashWill only present datastores which are All-Flash
All versions
(OSA)
Storage tierHybridWill only present datastores which are Hybrid
All versions
(OSA)
Storage tierNo preferenceWill present datastores that are All-Flash or Hybrid
All versions
(OSA and ESA)
Data ReductionDeduplication and compressionWill only present datastores which have deduplication and compression enabled
All versions
(OSA and ESA)
Data ReductionCompression onlyWill only present datastores which have compression enabled
vSAN 9.1 and later
(ESA)
Data ReductionNo data reductionWill only present datastores which have compression disabled, it will not disable compression or deduplication!
Pre vSAN 9.1
(ESA)
Data ReductionNo data reductionDisables Compression on all objects associated with the policy
All versions
(OSA)
Data ReductionNo data reductionWill only present datastores which have compression disabled, it will not disable compression or deduplication!
All versions
(OSA and ESA)
Data ReductionAll versions (OSA and ESA)Will present datastores with or without deduplication and compression enabled

Primary Sidebar

About the Author

Duncan Epping is a Chief Technologist and Distinguished Engineering Architect at Broadcom. Besides writing on Yellow-Bricks, Duncan is the co-author of the vSAN Deep Dive and the vSphere Clustering Deep Dive book series. Duncan is also the host of the Unexplored Territory Podcast.

Follow Us

  • X
  • Spotify
  • RSS Feed
  • LinkedIn

Recommended Book(s)

Also visit!

For the Dutch-speaking audience, make sure to visit RunNerd.nl to follow my running adventure, read shoe/gear/race reviews, and more!

Do you like Hardcore-Punk music? Follow my Spotify Playlist!

Do you like 80s music? I got you covered!

Copyright Yellow-Bricks.com © 2026 ยท Log in