It&#x27;s not the same, obviously, but one thing you could do is redirect &quot;zfs snapshot&quot; to a file (instead of passing it to &quot;|zfs send&quot;), encrypt that locally (using whatever means you prefer: openssl, gpg, etc.) and then upload that.<p>Of course, tarsnap pretty much does that all by itself and does it quite well.