Bacula-users

Re: [Bacula-users] client/server passwords

2015-05-08 12:08:56
Subject: Re: [Bacula-users] client/server passwords
From: Alex Domoradov <alex.hha AT gmail DOT com>
To: Dimitri Maziuk <dmaziuk AT bmrb.wisc DOT edu>
Date: Fri, 8 May 2015 19:06:17 +0300
> En/decrypting .7TB stream you'll notice very much.
Do you mean 700 Gb? (653.04 GB)

> If your data isn't that sensitive, you're just wasting time.
it's a requirements from our security department. All communications between servers on the Internet should be encrypted.

Is there any point to test backup over stunnel without enabling TLS in Bacula?

On Fri, May 8, 2015 at 6:34 PM, Dimitri Maziuk <dmaziuk AT bmrb.wisc DOT edu> wrote:
On 2015-05-08 02:32, Alex Domoradov wrote:
> I made two tests yesterday. Full backup with TLS and without.

> Why difference is so big ~ 1,5 hours? Is it normal with tls enabled?

Yes. You have to encrypt everything on one end and decrypt on the other.
Despite what tls preachers tell us, encryption is not zero-cost. (The
exact cost depends you your cpus, load, on both ends, the algorithm and
key, etc.) Encrypting an http transaction typically adds microseconds to
a second-long page loads so you don't notice. En/decrypting .7TB stream
you'll notice very much.

Considering all the effort various 3-letter entities (isp, nsa, etc.)
are putting into tls proxies to effectively MITM tls connections, tls
encryption is or will soon be pointless even for sensitive data that's
worth encrypting. If your data isn't that sensitive, you're just wasting
time.

Dima


------------------------------------------------------------------------------
One dashboard for servers and applications across Physical-Virtual-Cloud
Widest out-of-the-box monitoring support with 50+ applications
Performance metrics, stats and reports that give you Actionable Insights
Deep dive visibility with transaction tracing using APM Insight.
http://ad.doubleclick.net/ddm/clk/290420510;117567292;y
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users

------------------------------------------------------------------------------
One dashboard for servers and applications across Physical-Virtual-Cloud 
Widest out-of-the-box monitoring support with 50+ applications
Performance metrics, stats and reports that give you Actionable Insights
Deep dive visibility with transaction tracing using APM Insight.
http://ad.doubleclick.net/ddm/clk/290420510;117567292;y
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users