Bacula-users

Re: [Bacula-users] client/server passwords

2015-05-08 11:36:15
Subject: Re: [Bacula-users] client/server passwords
From: Dimitri Maziuk <dmaziuk AT bmrb.wisc DOT edu>
To: bacula-users AT lists.sourceforge DOT net
Date: Fri, 08 May 2015 10:34:42 -0500
On 2015-05-08 02:32, Alex Domoradov wrote:
> I made two tests yesterday. Full backup with TLS and without.

> Why difference is so big ~ 1,5 hours? Is it normal with tls enabled?

Yes. You have to encrypt everything on one end and decrypt on the other. 
Despite what tls preachers tell us, encryption is not zero-cost. (The 
exact cost depends you your cpus, load, on both ends, the algorithm and 
key, etc.) Encrypting an http transaction typically adds microseconds to 
a second-long page loads so you don't notice. En/decrypting .7TB stream 
you'll notice very much.

Considering all the effort various 3-letter entities (isp, nsa, etc.) 
are putting into tls proxies to effectively MITM tls connections, tls 
encryption is or will soon be pointless even for sensitive data that's 
worth encrypting. If your data isn't that sensitive, you're just wasting 
time.

Dima


------------------------------------------------------------------------------
One dashboard for servers and applications across Physical-Virtual-Cloud 
Widest out-of-the-box monitoring support with 50+ applications
Performance metrics, stats and reports that give you Actionable Insights
Deep dive visibility with transaction tracing using APM Insight.
http://ad.doubleclick.net/ddm/clk/290420510;117567292;y
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users