]> git.proxmox.com Git - mirror_zfs.git/blobdiff - module/zfs/vdev_mirror.c
Provide macros for setting and getting blkptr birth times
[mirror_zfs.git] / module / zfs / vdev_mirror.c
index 0cf2bc66500d4f4e49374be4ffc8fc1975732866..102eacb0334997b58d09f97caecdda362b21cd6e 100644 (file)
@@ -6,7 +6,7 @@
  * You may not use this file except in compliance with the License.
  *
  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
- * or http://www.opensolaris.org/os/licensing.
+ * or https://opensource.org/licenses/CDDL-1.0.
  * See the License for the specific language governing permissions
  * and limitations under the License.
  *
 
 #include <sys/zfs_context.h>
 #include <sys/spa.h>
+#include <sys/spa_impl.h>
+#include <sys/dsl_pool.h>
+#include <sys/dsl_scan.h>
 #include <sys/vdev_impl.h>
+#include <sys/vdev_draid.h>
 #include <sys/zio.h>
+#include <sys/zio_checksum.h>
 #include <sys/abd.h>
 #include <sys/fs/zfs.h>
 
 /*
- * Virtual device vector for mirroring.
+ * Vdev mirror kstats
  */
+static kstat_t *mirror_ksp = NULL;
+
+typedef struct mirror_stats {
+       kstat_named_t vdev_mirror_stat_rotating_linear;
+       kstat_named_t vdev_mirror_stat_rotating_offset;
+       kstat_named_t vdev_mirror_stat_rotating_seek;
+       kstat_named_t vdev_mirror_stat_non_rotating_linear;
+       kstat_named_t vdev_mirror_stat_non_rotating_seek;
+
+       kstat_named_t vdev_mirror_stat_preferred_found;
+       kstat_named_t vdev_mirror_stat_preferred_not_found;
+} mirror_stats_t;
+
+static mirror_stats_t mirror_stats = {
+       /* New I/O follows directly the last I/O */
+       { "rotating_linear",                    KSTAT_DATA_UINT64 },
+       /* New I/O is within zfs_vdev_mirror_rotating_seek_offset of the last */
+       { "rotating_offset",                    KSTAT_DATA_UINT64 },
+       /* New I/O requires random seek */
+       { "rotating_seek",                      KSTAT_DATA_UINT64 },
+       /* New I/O follows directly the last I/O  (nonrot) */
+       { "non_rotating_linear",                KSTAT_DATA_UINT64 },
+       /* New I/O requires random seek (nonrot) */
+       { "non_rotating_seek",                  KSTAT_DATA_UINT64 },
+       /* Preferred child vdev found */
+       { "preferred_found",                    KSTAT_DATA_UINT64 },
+       /* Preferred child vdev not found or equal load  */
+       { "preferred_not_found",                KSTAT_DATA_UINT64 },
+
+};
+
+#define        MIRROR_STAT(stat)               (mirror_stats.stat.value.ui64)
+#define        MIRROR_INCR(stat, val)          atomic_add_64(&MIRROR_STAT(stat), val)
+#define        MIRROR_BUMP(stat)               MIRROR_INCR(stat, 1)
+
+void
+vdev_mirror_stat_init(void)
+{
+       mirror_ksp = kstat_create("zfs", 0, "vdev_mirror_stats",
+           "misc", KSTAT_TYPE_NAMED,
+           sizeof (mirror_stats) / sizeof (kstat_named_t), KSTAT_FLAG_VIRTUAL);
+       if (mirror_ksp != NULL) {
+               mirror_ksp->ks_data = &mirror_stats;
+               kstat_install(mirror_ksp);
+       }
+}
+
+void
+vdev_mirror_stat_fini(void)
+{
+       if (mirror_ksp != NULL) {
+               kstat_delete(mirror_ksp);
+               mirror_ksp = NULL;
+       }
+}
 
+/*
+ * Virtual device vector for mirroring.
+ */
 typedef struct mirror_child {
        vdev_t          *mc_vd;
+       abd_t           *mc_abd;
        uint64_t        mc_offset;
        int             mc_error;
        int             mc_load;
        uint8_t         mc_tried;
        uint8_t         mc_skipped;
        uint8_t         mc_speculative;
+       uint8_t         mc_rebuilding;
 } mirror_child_t;
 
 typedef struct mirror_map {
        int             *mm_preferred;
        int             mm_preferred_cnt;
        int             mm_children;
-       boolean_t       mm_replacing;
+       boolean_t       mm_resilvering;
+       boolean_t       mm_rebuilding;
        boolean_t       mm_root;
        mirror_child_t  mm_child[];
 } mirror_map_t;
 
-static int vdev_mirror_shift = 21;
+static const int vdev_mirror_shift = 21;
 
 /*
  * The load configuration settings below are tuned by default for
@@ -86,13 +152,13 @@ vdev_mirror_map_size(int children)
 }
 
 static inline mirror_map_t *
-vdev_mirror_map_alloc(int children, boolean_t replacing, boolean_t root)
+vdev_mirror_map_alloc(int children, boolean_t resilvering, boolean_t root)
 {
        mirror_map_t *mm;
 
        mm = kmem_zalloc(vdev_mirror_map_size(children), KM_SLEEP);
        mm->mm_children = children;
-       mm->mm_replacing = replacing;
+       mm->mm_resilvering = resilvering;
        mm->mm_root = root;
        mm->mm_preferred = (int *)((uintptr_t)mm +
            offsetof(mirror_map_t, mm_child[children]));
@@ -109,8 +175,7 @@ vdev_mirror_map_free(zio_t *zio)
 }
 
 static const zio_vsd_ops_t vdev_mirror_vsd_ops = {
-       vdev_mirror_map_free,
-       zio_vsd_default_cksum_report
+       .vsd_free = vdev_mirror_map_free,
 };
 
 static int
@@ -140,8 +205,10 @@ vdev_mirror_load(mirror_map_t *mm, vdev_t *vd, uint64_t zio_offset)
 
        if (vd->vdev_nonrot) {
                /* Non-rotating media. */
-               if (last_offset == zio_offset)
+               if (last_offset == zio_offset) {
+                       MIRROR_BUMP(vdev_mirror_stat_non_rotating_linear);
                        return (load + zfs_vdev_mirror_non_rotating_inc);
+               }
 
                /*
                 * Apply a seek penalty even for non-rotating devices as
@@ -149,12 +216,15 @@ vdev_mirror_load(mirror_map_t *mm, vdev_t *vd, uint64_t zio_offset)
                 * the device, thus avoiding unnecessary per-command overhead
                 * and boosting performance.
                 */
+               MIRROR_BUMP(vdev_mirror_stat_non_rotating_seek);
                return (load + zfs_vdev_mirror_non_rotating_seek_inc);
        }
 
        /* Rotating media I/O's which directly follow the last I/O. */
-       if (last_offset == zio_offset)
+       if (last_offset == zio_offset) {
+               MIRROR_BUMP(vdev_mirror_stat_rotating_linear);
                return (load + zfs_vdev_mirror_rotating_inc);
+       }
 
        /*
         * Apply half the seek increment to I/O's within seek offset
@@ -162,13 +232,31 @@ vdev_mirror_load(mirror_map_t *mm, vdev_t *vd, uint64_t zio_offset)
         * of a seek increment.
         */
        offset_diff = (int64_t)(last_offset - zio_offset);
-       if (ABS(offset_diff) < zfs_vdev_mirror_rotating_seek_offset)
+       if (ABS(offset_diff) < zfs_vdev_mirror_rotating_seek_offset) {
+               MIRROR_BUMP(vdev_mirror_stat_rotating_offset);
                return (load + (zfs_vdev_mirror_rotating_seek_inc / 2));
+       }
 
        /* Apply the full seek increment to all other I/O's. */
+       MIRROR_BUMP(vdev_mirror_stat_rotating_seek);
        return (load + zfs_vdev_mirror_rotating_seek_inc);
 }
 
+static boolean_t
+vdev_mirror_rebuilding(vdev_t *vd)
+{
+       if (vd->vdev_ops->vdev_op_leaf && vd->vdev_rebuild_txg)
+               return (B_TRUE);
+
+       for (int i = 0; i < vd->vdev_children; i++) {
+               if (vdev_mirror_rebuilding(vd->vdev_child[i])) {
+                       return (B_TRUE);
+               }
+       }
+
+       return (B_FALSE);
+}
+
 /*
  * Avoid inlining the function to keep vdev_mirror_io_start(), which
  * is this functions only caller, as small as possible on the stack.
@@ -184,38 +272,123 @@ vdev_mirror_map_init(zio_t *zio)
        if (vd == NULL) {
                dva_t *dva = zio->io_bp->blk_dva;
                spa_t *spa = zio->io_spa;
+               dsl_scan_t *scn = spa->spa_dsl_pool->dp_scan;
+               dva_t dva_copy[SPA_DVAS_PER_BP];
+
+               /*
+                * The sequential scrub code sorts and issues all DVAs
+                * of a bp separately. Each of these IOs includes all
+                * original DVA copies so that repairs can be performed
+                * in the event of an error, but we only actually want
+                * to check the first DVA since the others will be
+                * checked by their respective sorted IOs. Only if we
+                * hit an error will we try all DVAs upon retrying.
+                *
+                * Note: This check is safe even if the user switches
+                * from a legacy scrub to a sequential one in the middle
+                * of processing, since scn_is_sorted isn't updated until
+                * all outstanding IOs from the previous scrub pass
+                * complete.
+                */
+               if ((zio->io_flags & ZIO_FLAG_SCRUB) &&
+                   !(zio->io_flags & ZIO_FLAG_IO_RETRY) &&
+                   dsl_scan_scrubbing(spa->spa_dsl_pool) &&
+                   scn->scn_is_sorted) {
+                       c = 1;
+               } else {
+                       c = BP_GET_NDVAS(zio->io_bp);
+               }
 
-               mm = vdev_mirror_map_alloc(BP_GET_NDVAS(zio->io_bp), B_FALSE,
-                   B_TRUE);
+               /*
+                * If the pool cannot be written to, then infer that some
+                * DVAs might be invalid or point to vdevs that do not exist.
+                * We skip them.
+                */
+               if (!spa_writeable(spa)) {
+                       ASSERT3U(zio->io_type, ==, ZIO_TYPE_READ);
+                       int j = 0;
+                       for (int i = 0; i < c; i++) {
+                               if (zfs_dva_valid(spa, &dva[i], zio->io_bp))
+                                       dva_copy[j++] = dva[i];
+                       }
+                       if (j == 0) {
+                               zio->io_vsd = NULL;
+                               zio->io_error = ENXIO;
+                               return (NULL);
+                       }
+                       if (j < c) {
+                               dva = dva_copy;
+                               c = j;
+                       }
+               }
+
+               mm = vdev_mirror_map_alloc(c, B_FALSE, B_TRUE);
                for (c = 0; c < mm->mm_children; c++) {
                        mc = &mm->mm_child[c];
 
                        mc->mc_vd = vdev_lookup_top(spa, DVA_GET_VDEV(&dva[c]));
                        mc->mc_offset = DVA_GET_OFFSET(&dva[c]);
+                       if (mc->mc_vd == NULL) {
+                               kmem_free(mm, vdev_mirror_map_size(
+                                   mm->mm_children));
+                               zio->io_vsd = NULL;
+                               zio->io_error = ENXIO;
+                               return (NULL);
+                       }
                }
        } else {
-               mm = vdev_mirror_map_alloc(vd->vdev_children,
-                   (vd->vdev_ops == &vdev_replacing_ops ||
-                   vd->vdev_ops == &vdev_spare_ops), B_FALSE);
+               /*
+                * If we are resilvering, then we should handle scrub reads
+                * differently; we shouldn't issue them to the resilvering
+                * device because it might not have those blocks.
+                *
+                * We are resilvering iff:
+                * 1) We are a replacing vdev (ie our name is "replacing-1" or
+                *    "spare-1" or something like that), and
+                * 2) The pool is currently being resilvered.
+                *
+                * We cannot simply check vd->vdev_resilver_txg, because it's
+                * not set in this path.
+                *
+                * Nor can we just check our vdev_ops; there are cases (such as
+                * when a user types "zpool replace pool odev spare_dev" and
+                * spare_dev is in the spare list, or when a spare device is
+                * automatically used to replace a DEGRADED device) when
+                * resilvering is complete but both the original vdev and the
+                * spare vdev remain in the pool.  That behavior is intentional.
+                * It helps implement the policy that a spare should be
+                * automatically removed from the pool after the user replaces
+                * the device that originally failed.
+                *
+                * If a spa load is in progress, then spa_dsl_pool may be
+                * uninitialized.  But we shouldn't be resilvering during a spa
+                * load anyway.
+                */
+               boolean_t replacing = (vd->vdev_ops == &vdev_replacing_ops ||
+                   vd->vdev_ops == &vdev_spare_ops) &&
+                   spa_load_state(vd->vdev_spa) == SPA_LOAD_NONE &&
+                   dsl_scan_resilvering(vd->vdev_spa->spa_dsl_pool);
+               mm = vdev_mirror_map_alloc(vd->vdev_children, replacing,
+                   B_FALSE);
                for (c = 0; c < mm->mm_children; c++) {
                        mc = &mm->mm_child[c];
                        mc->mc_vd = vd->vdev_child[c];
                        mc->mc_offset = zio->io_offset;
+
+                       if (vdev_mirror_rebuilding(mc->mc_vd))
+                               mm->mm_rebuilding = mc->mc_rebuilding = B_TRUE;
                }
        }
 
-       zio->io_vsd = mm;
-       zio->io_vsd_ops = &vdev_mirror_vsd_ops;
        return (mm);
 }
 
 static int
 vdev_mirror_open(vdev_t *vd, uint64_t *asize, uint64_t *max_asize,
-    uint64_t *ashift)
+    uint64_t *logical_ashift, uint64_t *physical_ashift)
 {
        int numerrors = 0;
        int lasterror = 0;
-       int c;
 
        if (vd->vdev_children == 0) {
                vd->vdev_stat.vs_aux = VDEV_AUX_BAD_LABEL;
@@ -224,7 +397,7 @@ vdev_mirror_open(vdev_t *vd, uint64_t *asize, uint64_t *max_asize,
 
        vdev_open_children(vd);
 
-       for (c = 0; c < vd->vdev_children; c++) {
+       for (int c = 0; c < vd->vdev_children; c++) {
                vdev_t *cvd = vd->vdev_child[c];
 
                if (cvd->vdev_open_error) {
@@ -235,11 +408,22 @@ vdev_mirror_open(vdev_t *vd, uint64_t *asize, uint64_t *max_asize,
 
                *asize = MIN(*asize - 1, cvd->vdev_asize - 1) + 1;
                *max_asize = MIN(*max_asize - 1, cvd->vdev_max_asize - 1) + 1;
-               *ashift = MAX(*ashift, cvd->vdev_ashift);
+               *logical_ashift = MAX(*logical_ashift, cvd->vdev_ashift);
+       }
+       for (int c = 0; c < vd->vdev_children; c++) {
+               vdev_t *cvd = vd->vdev_child[c];
+
+               if (cvd->vdev_open_error)
+                       continue;
+               *physical_ashift = vdev_best_ashift(*logical_ashift,
+                   *physical_ashift, cvd->vdev_physical_ashift);
        }
 
        if (numerrors == vd->vdev_children) {
-               vd->vdev_stat.vs_aux = VDEV_AUX_NO_REPLICAS;
+               if (vdev_children_are_offline(vd))
+                       vd->vdev_stat.vs_aux = VDEV_AUX_CHILDREN_OFFLINE;
+               else
+                       vd->vdev_stat.vs_aux = VDEV_AUX_NO_REPLICAS;
                return (lasterror);
        }
 
@@ -249,9 +433,7 @@ vdev_mirror_open(vdev_t *vd, uint64_t *asize, uint64_t *max_asize,
 static void
 vdev_mirror_close(vdev_t *vd)
 {
-       int c;
-
-       for (c = 0; c < vd->vdev_children; c++)
+       for (int c = 0; c < vd->vdev_children; c++)
                vdev_close(vd->vdev_child[c]);
 }
 
@@ -265,32 +447,6 @@ vdev_mirror_child_done(zio_t *zio)
        mc->mc_skipped = 0;
 }
 
-static void
-vdev_mirror_scrub_done(zio_t *zio)
-{
-       mirror_child_t *mc = zio->io_private;
-
-       if (zio->io_error == 0) {
-               zio_t *pio;
-               zio_link_t *zl = NULL;
-
-               mutex_enter(&zio->io_lock);
-               while ((pio = zio_walk_parents(zio, &zl)) != NULL) {
-                       mutex_enter(&pio->io_lock);
-                       ASSERT3U(zio->io_size, >=, pio->io_size);
-                       abd_copy(pio->io_abd, zio->io_abd, pio->io_size);
-                       mutex_exit(&pio->io_lock);
-               }
-               mutex_exit(&zio->io_lock);
-       }
-
-       abd_free(zio->io_abd);
-
-       mc->mc_error = zio->io_error;
-       mc->mc_tried = 1;
-       mc->mc_skipped = 0;
-}
-
 /*
  * Check the other, lower-index DVAs to see if they're on the same
  * vdev as the child we picked.  If they are, use them since they
@@ -322,7 +478,7 @@ vdev_mirror_preferred_child_randomize(zio_t *zio)
        int p;
 
        if (mm->mm_root) {
-               p = spa_get_random(mm->mm_preferred_cnt);
+               p = random_in_range(mm->mm_preferred_cnt);
                return (vdev_mirror_dva_select(zio, p));
        }
 
@@ -336,12 +492,37 @@ vdev_mirror_preferred_child_randomize(zio_t *zio)
        return (mm->mm_preferred[p]);
 }
 
+static boolean_t
+vdev_mirror_child_readable(mirror_child_t *mc)
+{
+       vdev_t *vd = mc->mc_vd;
+
+       if (vd->vdev_top != NULL && vd->vdev_top->vdev_ops == &vdev_draid_ops)
+               return (vdev_draid_readable(vd, mc->mc_offset));
+       else
+               return (vdev_readable(vd));
+}
+
+static boolean_t
+vdev_mirror_child_missing(mirror_child_t *mc, uint64_t txg, uint64_t size)
+{
+       vdev_t *vd = mc->mc_vd;
+
+       if (vd->vdev_top != NULL && vd->vdev_top->vdev_ops == &vdev_draid_ops)
+               return (vdev_draid_missing(vd, mc->mc_offset, txg, size));
+       else
+               return (vdev_dtl_contains(vd, DTL_MISSING, txg, size));
+}
+
 /*
  * Try to find a vdev whose DTL doesn't contain the block we want to read
- * prefering vdevs based on determined load.
+ * preferring vdevs based on determined load. If we can't, try the read on
+ * any vdev we haven't already tried.
  *
- * Try to find a child whose DTL doesn't contain the block we want to read.
- * If we can't, try the read on any vdev we haven't already tried.
+ * Distributed spares are an exception to the above load rule. They are
+ * always preferred in order to detect gaps in the distributed spare which
+ * are created when another disk in the dRAID fails. In order to restore
+ * redundancy those gaps must be read to trigger the required repair IO.
  */
 static int
 vdev_mirror_child_select(zio_t *zio)
@@ -350,7 +531,7 @@ vdev_mirror_child_select(zio_t *zio)
        uint64_t txg = zio->io_txg;
        int c, lowest_load;
 
-       ASSERT(zio->io_bp == NULL || BP_PHYSICAL_BIRTH(zio->io_bp) == txg);
+       ASSERT(zio->io_bp == NULL || BP_GET_BIRTH(zio->io_bp) == txg);
 
        lowest_load = INT_MAX;
        mm->mm_preferred_cnt = 0;
@@ -361,20 +542,27 @@ vdev_mirror_child_select(zio_t *zio)
                if (mc->mc_tried || mc->mc_skipped)
                        continue;
 
-               if (mc->mc_vd == NULL || !vdev_readable(mc->mc_vd)) {
+               if (mc->mc_vd == NULL ||
+                   !vdev_mirror_child_readable(mc)) {
                        mc->mc_error = SET_ERROR(ENXIO);
                        mc->mc_tried = 1;       /* don't even try */
                        mc->mc_skipped = 1;
                        continue;
                }
 
-               if (vdev_dtl_contains(mc->mc_vd, DTL_MISSING, txg, 1)) {
+               if (vdev_mirror_child_missing(mc, txg, 1)) {
                        mc->mc_error = SET_ERROR(ESTALE);
                        mc->mc_skipped = 1;
                        mc->mc_speculative = 1;
                        continue;
                }
 
+               if (mc->mc_vd->vdev_ops == &vdev_draid_spare_ops) {
+                       mm->mm_preferred[0] = c;
+                       mm->mm_preferred_cnt = 1;
+                       break;
+               }
+
                mc->mc_load = vdev_mirror_load(mm, mc->mc_vd, mc->mc_offset);
                if (mc->mc_load > lowest_load)
                        continue;
@@ -387,12 +575,15 @@ vdev_mirror_child_select(zio_t *zio)
                mm->mm_preferred_cnt++;
        }
 
-       if (mm->mm_preferred_cnt == 1)
+       if (mm->mm_preferred_cnt == 1) {
+               MIRROR_BUMP(vdev_mirror_stat_preferred_found);
                return (mm->mm_preferred[0]);
+       }
 
-
-       if (mm->mm_preferred_cnt > 1)
+       if (mm->mm_preferred_cnt > 1) {
+               MIRROR_BUMP(vdev_mirror_stat_preferred_not_found);
                return (vdev_mirror_preferred_child_randomize(zio));
+       }
 
        /*
         * Every device is either missing or has this txg in its DTL.
@@ -417,23 +608,46 @@ vdev_mirror_io_start(zio_t *zio)
        int c, children;
 
        mm = vdev_mirror_map_init(zio);
+       zio->io_vsd = mm;
+       zio->io_vsd_ops = &vdev_mirror_vsd_ops;
+
+       if (mm == NULL) {
+               ASSERT(!spa_trust_config(zio->io_spa));
+               ASSERT(zio->io_type == ZIO_TYPE_READ);
+               zio_execute(zio);
+               return;
+       }
 
        if (zio->io_type == ZIO_TYPE_READ) {
-               if ((zio->io_flags & ZIO_FLAG_SCRUB) && !mm->mm_replacing) {
+               if ((zio->io_flags & ZIO_FLAG_SCRUB) && !mm->mm_resilvering) {
                        /*
-                        * For scrubbing reads we need to allocate a read
-                        * buffer for each child and issue reads to all
-                        * children.  If any child succeeds, it will copy its
-                        * data into zio->io_data in vdev_mirror_scrub_done.
+                        * For scrubbing reads we need to issue reads to all
+                        * children.  One child can reuse parent buffer, but
+                        * for others we have to allocate separate ones to
+                        * verify checksums if io_bp is non-NULL, or compare
+                        * them in vdev_mirror_io_done() otherwise.
                         */
+                       boolean_t first = B_TRUE;
                        for (c = 0; c < mm->mm_children; c++) {
                                mc = &mm->mm_child[c];
-                               zio_nowait(zio_vdev_child_io(zio, zio->io_bp,
-                                   mc->mc_vd, mc->mc_offset,
+
+                               /* Don't issue ZIOs to offline children */
+                               if (!vdev_mirror_child_readable(mc)) {
+                                       mc->mc_error = SET_ERROR(ENXIO);
+                                       mc->mc_tried = 1;
+                                       mc->mc_skipped = 1;
+                                       continue;
+                               }
+
+                               mc->mc_abd = first ? zio->io_abd :
                                    abd_alloc_sametype(zio->io_abd,
-                                   zio->io_size), zio->io_size,
-                                   zio->io_type, zio->io_priority, 0,
-                                   vdev_mirror_scrub_done, mc));
+                                   zio->io_size);
+                               zio_nowait(zio_vdev_child_io(zio, zio->io_bp,
+                                   mc->mc_vd, mc->mc_offset, mc->mc_abd,
+                                   zio->io_size, zio->io_type,
+                                   zio->io_priority, 0,
+                                   vdev_mirror_child_done, mc));
+                               first = B_FALSE;
                        }
                        zio_execute(zio);
                        return;
@@ -455,11 +669,25 @@ vdev_mirror_io_start(zio_t *zio)
 
        while (children--) {
                mc = &mm->mm_child[c];
+               c++;
+
+               /*
+                * When sequentially resilvering only issue write repair
+                * IOs to the vdev which is being rebuilt since performance
+                * is limited by the slowest child.  This is an issue for
+                * faster replacement devices such as distributed spares.
+                */
+               if ((zio->io_priority == ZIO_PRIORITY_REBUILD) &&
+                   (zio->io_flags & ZIO_FLAG_IO_REPAIR) &&
+                   !(zio->io_flags & ZIO_FLAG_SCRUB) &&
+                   mm->mm_rebuilding && !mc->mc_rebuilding) {
+                       continue;
+               }
+
                zio_nowait(zio_vdev_child_io(zio, zio->io_bp,
                    mc->mc_vd, mc->mc_offset, zio->io_abd, zio->io_size,
                    zio->io_type, zio->io_priority, 0,
                    vdev_mirror_child_done, mc));
-               c++;
        }
 
        zio_execute(zio);
@@ -468,9 +696,9 @@ vdev_mirror_io_start(zio_t *zio)
 static int
 vdev_mirror_worst_error(mirror_map_t *mm)
 {
-       int c, error[2] = { 0, 0 };
+       int error[2] = { 0, 0 };
 
-       for (c = 0; c < mm->mm_children; c++) {
+       for (int c = 0; c < mm->mm_children; c++) {
                mirror_child_t *mc = &mm->mm_child[c];
                int s = mc->mc_speculative;
                error[s] = zio_worst_error(error[s], mc->mc_error);
@@ -487,6 +715,10 @@ vdev_mirror_io_done(zio_t *zio)
        int c;
        int good_copies = 0;
        int unexpected_errors = 0;
+       int last_good_copy = -1;
+
+       if (mm == NULL)
+               return;
 
        for (c = 0; c < mm->mm_children; c++) {
                mc = &mm->mm_child[c];
@@ -495,6 +727,7 @@ vdev_mirror_io_done(zio_t *zio)
                        if (!mc->mc_skipped)
                                unexpected_errors++;
                } else if (mc->mc_tried) {
+                       last_good_copy = c;
                        good_copies++;
                }
        }
@@ -508,7 +741,6 @@ vdev_mirror_io_done(zio_t *zio)
                 * no non-degraded top-level vdevs left, and not update DTLs
                 * if we intend to reallocate.
                 */
-               /* XXPOLICY */
                if (good_copies != mm->mm_children) {
                        /*
                         * Always require at least one good copy.
@@ -535,7 +767,6 @@ vdev_mirror_io_done(zio_t *zio)
        /*
         * If we don't have a good copy yet, keep trying other children.
         */
-       /* XXPOLICY */
        if (good_copies == 0 && (c = vdev_mirror_child_select(zio)) != -1) {
                ASSERT(c >= 0 && c < mm->mm_children);
                mc = &mm->mm_child[c];
@@ -547,7 +778,80 @@ vdev_mirror_io_done(zio_t *zio)
                return;
        }
 
-       /* XXPOLICY */
+       if (zio->io_flags & ZIO_FLAG_SCRUB && !mm->mm_resilvering) {
+               abd_t *best_abd = NULL;
+               if (last_good_copy >= 0)
+                       best_abd = mm->mm_child[last_good_copy].mc_abd;
+
+               /*
+                * If we're scrubbing but don't have a BP available (because
+                * this vdev is under a raidz or draid vdev) then the best we
+                * can do is compare all of the copies read.  If they're not
+                * identical then return a checksum error and the most likely
+                * correct data.  The raidz code will issue a repair I/O if
+                * possible.
+                */
+               if (zio->io_bp == NULL) {
+                       ASSERT(zio->io_vd->vdev_ops == &vdev_replacing_ops ||
+                           zio->io_vd->vdev_ops == &vdev_spare_ops);
+
+                       abd_t *pref_abd = NULL;
+                       for (c = 0; c < last_good_copy; c++) {
+                               mc = &mm->mm_child[c];
+                               if (mc->mc_error || !mc->mc_tried)
+                                       continue;
+
+                               if (abd_cmp(mc->mc_abd, best_abd) != 0)
+                                       zio->io_error = SET_ERROR(ECKSUM);
+
+                               /*
+                                * The distributed spare is always prefered
+                                * by vdev_mirror_child_select() so it's
+                                * considered to be the best candidate.
+                                */
+                               if (pref_abd == NULL &&
+                                   mc->mc_vd->vdev_ops ==
+                                   &vdev_draid_spare_ops)
+                                       pref_abd = mc->mc_abd;
+
+                               /*
+                                * In the absence of a preferred copy, use
+                                * the parent pointer to avoid a memory copy.
+                                */
+                               if (mc->mc_abd == zio->io_abd)
+                                       best_abd = mc->mc_abd;
+                       }
+                       if (pref_abd)
+                               best_abd = pref_abd;
+               } else {
+
+                       /*
+                        * If we have a BP available, then checksums are
+                        * already verified and we just need a buffer
+                        * with valid data, preferring parent one to
+                        * avoid a memory copy.
+                        */
+                       for (c = 0; c < last_good_copy; c++) {
+                               mc = &mm->mm_child[c];
+                               if (mc->mc_error || !mc->mc_tried)
+                                       continue;
+                               if (mc->mc_abd == zio->io_abd) {
+                                       best_abd = mc->mc_abd;
+                                       break;
+                               }
+                       }
+               }
+
+               if (best_abd && best_abd != zio->io_abd)
+                       abd_copy(zio->io_abd, best_abd, zio->io_size);
+               for (c = 0; c < mm->mm_children; c++) {
+                       mc = &mm->mm_child[c];
+                       if (mc->mc_abd != zio->io_abd)
+                               abd_free(mc->mc_abd);
+                       mc->mc_abd = NULL;
+               }
+       }
+
        if (good_copies == 0) {
                zio->io_error = vdev_mirror_worst_error(mm);
                ASSERT(zio->io_error != 0);
@@ -556,7 +860,7 @@ vdev_mirror_io_done(zio_t *zio)
        if (good_copies && spa_writeable(zio->io_spa) &&
            (unexpected_errors ||
            (zio->io_flags & ZIO_FLAG_RESILVER) ||
-           ((zio->io_flags & ZIO_FLAG_SCRUB) && mm->mm_replacing))) {
+           ((zio->io_flags & ZIO_FLAG_SCRUB) && mm->mm_resilvering))) {
                /*
                 * Use the good data we have in hand to repair damaged children.
                 */
@@ -571,9 +875,26 @@ vdev_mirror_io_done(zio_t *zio)
                        mc = &mm->mm_child[c];
 
                        if (mc->mc_error == 0) {
+                               vdev_ops_t *ops = mc->mc_vd->vdev_ops;
+
                                if (mc->mc_tried)
                                        continue;
+                               /*
+                                * We didn't try this child.  We need to
+                                * repair it if:
+                                * 1. it's a scrub (in which case we have
+                                * tried everything that was healthy)
+                                *  - or -
+                                * 2. it's an indirect or distributed spare
+                                * vdev (in which case it could point to any
+                                * other vdev, which might have a bad DTL)
+                                *  - or -
+                                * 3. the DTL indicates that this data is
+                                * missing from this vdev
+                                */
                                if (!(zio->io_flags & ZIO_FLAG_SCRUB) &&
+                                   ops != &vdev_indirect_ops &&
+                                   ops != &vdev_draid_spare_ops &&
                                    !vdev_dtl_contains(mc->mc_vd, DTL_PARTIAL,
                                    zio->io_txg, 1))
                                        continue;
@@ -582,8 +903,9 @@ vdev_mirror_io_done(zio_t *zio)
 
                        zio_nowait(zio_vdev_child_io(zio, zio->io_bp,
                            mc->mc_vd, mc->mc_offset,
-                           zio->io_abd, zio->io_size,
-                           ZIO_TYPE_WRITE, ZIO_PRIORITY_ASYNC_WRITE,
+                           zio->io_abd, zio->io_size, ZIO_TYPE_WRITE,
+                           zio->io_priority == ZIO_PRIORITY_REBUILD ?
+                           ZIO_PRIORITY_REBUILD : ZIO_PRIORITY_ASYNC_WRITE,
                            ZIO_FLAG_IO_REPAIR | (unexpected_errors ?
                            ZIO_FLAG_SELF_HEAL : 0), NULL, NULL));
                }
@@ -593,79 +915,126 @@ vdev_mirror_io_done(zio_t *zio)
 static void
 vdev_mirror_state_change(vdev_t *vd, int faulted, int degraded)
 {
-       if (faulted == vd->vdev_children)
-               vdev_set_state(vd, B_FALSE, VDEV_STATE_CANT_OPEN,
-                   VDEV_AUX_NO_REPLICAS);
-       else if (degraded + faulted != 0)
+       if (faulted == vd->vdev_children) {
+               if (vdev_children_are_offline(vd)) {
+                       vdev_set_state(vd, B_FALSE, VDEV_STATE_OFFLINE,
+                           VDEV_AUX_CHILDREN_OFFLINE);
+               } else {
+                       vdev_set_state(vd, B_FALSE, VDEV_STATE_CANT_OPEN,
+                           VDEV_AUX_NO_REPLICAS);
+               }
+       } else if (degraded + faulted != 0) {
                vdev_set_state(vd, B_FALSE, VDEV_STATE_DEGRADED, VDEV_AUX_NONE);
-       else
+       } else {
                vdev_set_state(vd, B_FALSE, VDEV_STATE_HEALTHY, VDEV_AUX_NONE);
+       }
+}
+
+/*
+ * Return the maximum asize for a rebuild zio in the provided range.
+ */
+static uint64_t
+vdev_mirror_rebuild_asize(vdev_t *vd, uint64_t start, uint64_t asize,
+    uint64_t max_segment)
+{
+       (void) start;
+
+       uint64_t psize = MIN(P2ROUNDUP(max_segment, 1 << vd->vdev_ashift),
+           SPA_MAXBLOCKSIZE);
+
+       return (MIN(asize, vdev_psize_to_asize(vd, psize)));
 }
 
 vdev_ops_t vdev_mirror_ops = {
-       vdev_mirror_open,
-       vdev_mirror_close,
-       vdev_default_asize,
-       vdev_mirror_io_start,
-       vdev_mirror_io_done,
-       vdev_mirror_state_change,
-       NULL,
-       NULL,
-       NULL,
-       VDEV_TYPE_MIRROR,       /* name of this vdev type */
-       B_FALSE                 /* not a leaf vdev */
+       .vdev_op_init = NULL,
+       .vdev_op_fini = NULL,
+       .vdev_op_open = vdev_mirror_open,
+       .vdev_op_close = vdev_mirror_close,
+       .vdev_op_asize = vdev_default_asize,
+       .vdev_op_min_asize = vdev_default_min_asize,
+       .vdev_op_min_alloc = NULL,
+       .vdev_op_io_start = vdev_mirror_io_start,
+       .vdev_op_io_done = vdev_mirror_io_done,
+       .vdev_op_state_change = vdev_mirror_state_change,
+       .vdev_op_need_resilver = vdev_default_need_resilver,
+       .vdev_op_hold = NULL,
+       .vdev_op_rele = NULL,
+       .vdev_op_remap = NULL,
+       .vdev_op_xlate = vdev_default_xlate,
+       .vdev_op_rebuild_asize = vdev_mirror_rebuild_asize,
+       .vdev_op_metaslab_init = NULL,
+       .vdev_op_config_generate = NULL,
+       .vdev_op_nparity = NULL,
+       .vdev_op_ndisks = NULL,
+       .vdev_op_type = VDEV_TYPE_MIRROR,       /* name of this vdev type */
+       .vdev_op_leaf = B_FALSE                 /* not a leaf vdev */
 };
 
 vdev_ops_t vdev_replacing_ops = {
-       vdev_mirror_open,
-       vdev_mirror_close,
-       vdev_default_asize,
-       vdev_mirror_io_start,
-       vdev_mirror_io_done,
-       vdev_mirror_state_change,
-       NULL,
-       NULL,
-       NULL,
-       VDEV_TYPE_REPLACING,    /* name of this vdev type */
-       B_FALSE                 /* not a leaf vdev */
+       .vdev_op_init = NULL,
+       .vdev_op_fini = NULL,
+       .vdev_op_open = vdev_mirror_open,
+       .vdev_op_close = vdev_mirror_close,
+       .vdev_op_asize = vdev_default_asize,
+       .vdev_op_min_asize = vdev_default_min_asize,
+       .vdev_op_min_alloc = NULL,
+       .vdev_op_io_start = vdev_mirror_io_start,
+       .vdev_op_io_done = vdev_mirror_io_done,
+       .vdev_op_state_change = vdev_mirror_state_change,
+       .vdev_op_need_resilver = vdev_default_need_resilver,
+       .vdev_op_hold = NULL,
+       .vdev_op_rele = NULL,
+       .vdev_op_remap = NULL,
+       .vdev_op_xlate = vdev_default_xlate,
+       .vdev_op_rebuild_asize = vdev_mirror_rebuild_asize,
+       .vdev_op_metaslab_init = NULL,
+       .vdev_op_config_generate = NULL,
+       .vdev_op_nparity = NULL,
+       .vdev_op_ndisks = NULL,
+       .vdev_op_type = VDEV_TYPE_REPLACING,    /* name of this vdev type */
+       .vdev_op_leaf = B_FALSE                 /* not a leaf vdev */
 };
 
 vdev_ops_t vdev_spare_ops = {
-       vdev_mirror_open,
-       vdev_mirror_close,
-       vdev_default_asize,
-       vdev_mirror_io_start,
-       vdev_mirror_io_done,
-       vdev_mirror_state_change,
-       NULL,
-       NULL,
-       NULL,
-       VDEV_TYPE_SPARE,        /* name of this vdev type */
-       B_FALSE                 /* not a leaf vdev */
+       .vdev_op_init = NULL,
+       .vdev_op_fini = NULL,
+       .vdev_op_open = vdev_mirror_open,
+       .vdev_op_close = vdev_mirror_close,
+       .vdev_op_asize = vdev_default_asize,
+       .vdev_op_min_asize = vdev_default_min_asize,
+       .vdev_op_min_alloc = NULL,
+       .vdev_op_io_start = vdev_mirror_io_start,
+       .vdev_op_io_done = vdev_mirror_io_done,
+       .vdev_op_state_change = vdev_mirror_state_change,
+       .vdev_op_need_resilver = vdev_default_need_resilver,
+       .vdev_op_hold = NULL,
+       .vdev_op_rele = NULL,
+       .vdev_op_remap = NULL,
+       .vdev_op_xlate = vdev_default_xlate,
+       .vdev_op_rebuild_asize = vdev_mirror_rebuild_asize,
+       .vdev_op_metaslab_init = NULL,
+       .vdev_op_config_generate = NULL,
+       .vdev_op_nparity = NULL,
+       .vdev_op_ndisks = NULL,
+       .vdev_op_type = VDEV_TYPE_SPARE,        /* name of this vdev type */
+       .vdev_op_leaf = B_FALSE                 /* not a leaf vdev */
 };
 
-#if defined(_KERNEL) && defined(HAVE_SPL)
-/* BEGIN CSTYLED */
-module_param(zfs_vdev_mirror_rotating_inc, int, 0644);
-MODULE_PARM_DESC(zfs_vdev_mirror_rotating_inc,
-       "Rotating media load increment for non-seeking I/O's");
-
-module_param(zfs_vdev_mirror_rotating_seek_inc, int, 0644);
-MODULE_PARM_DESC(zfs_vdev_mirror_rotating_seek_inc,
-       "Rotating media load increment for seeking I/O's");
+ZFS_MODULE_PARAM(zfs_vdev_mirror, zfs_vdev_mirror_, rotating_inc, INT, ZMOD_RW,
+       "Rotating media load increment for non-seeking I/Os");
 
-module_param(zfs_vdev_mirror_rotating_seek_offset, int, 0644);
+ZFS_MODULE_PARAM(zfs_vdev_mirror, zfs_vdev_mirror_, rotating_seek_inc, INT,
+       ZMOD_RW, "Rotating media load increment for seeking I/Os");
 
-MODULE_PARM_DESC(zfs_vdev_mirror_rotating_seek_offset,
-       "Offset in bytes from the last I/O which "
-       "triggers a reduced rotating media seek increment");
+/* BEGIN CSTYLED */
+ZFS_MODULE_PARAM(zfs_vdev_mirror, zfs_vdev_mirror_, rotating_seek_offset, INT,
+       ZMOD_RW,
+       "Offset in bytes from the last I/O which triggers "
+       "a reduced rotating media seek increment");
+/* END CSTYLED */
 
-module_param(zfs_vdev_mirror_non_rotating_inc, int, 0644);
-MODULE_PARM_DESC(zfs_vdev_mirror_non_rotating_inc,
-       "Non-rotating media load increment for non-seeking I/O's");
+ZFS_MODULE_PARAM(zfs_vdev_mirror, zfs_vdev_mirror_, non_rotating_inc, INT,
+       ZMOD_RW, "Non-rotating media load increment for non-seeking I/Os");
 
-module_param(zfs_vdev_mirror_non_rotating_seek_inc, int, 0644);
-MODULE_PARM_DESC(zfs_vdev_mirror_non_rotating_seek_inc,
-       "Non-rotating media load increment for seeking I/O's");
-/* END CSTYLED */
-#endif
+ZFS_MODULE_PARAM(zfs_vdev_mirror, zfs_vdev_mirror_, non_rotating_seek_inc, INT,
+       ZMOD_RW, "Non-rotating media load increment for seeking I/Os");