I'm using it on all my servers.  I found that using blowfish is
substantially faster than using AES-256.   My dual 3.4GHz Xeon
(HyperThreading OFF) SAN media server maxes out at 6x 10MB/s streams
using blowfish.  That works out to about 200GB/hour in actual
real-life performance.

The big problem is that encrypted data does not compress on tape.  If
you want to use data compression, you need to do it in software before
the encryption.  NetBackup can do this, but it is very slow ...
several times slower than the encryption.

The weak point in the encryption system is the Key Management.  It
seems to be much easier and more secure to have the keys on a central
encryption device rather than on EVERY server being backed up.

For large environments, the ~$100 per system license cost for the
encryption option adds up to something comparable to the cost of an
encryption appliance or two.

Austin


On 11/27/06, Steve Fogarty <steve.fogarty at gmail.com> wrote:
>
>
> I am using it on some smaller servers.  Works fine, no errors, and able to
> restore to both the server the backup came from, and other servers, as long
> as the key is there, and the passphrase is the same.    Performance was
> inpacted some.  CPU was up, and about an increase of about 35% in time to
> back up.  That was with the default encryption type (AES-128-CFB).  When I
> switched to Blowfish...there was a HUGE impact on performance.  Not so much
> difference in CPU use, but in length of backup time.
>
> Steve
>
>
>
>  ________________________________
>  From: veritas-bu-bounces at mailman.eng.auburn.edu
> [mailto:veritas-bu-bounces at mailman.eng.auburn.edu] On
> Behalf Of Tristan Ball
> Sent: Sunday, November 26, 2006 11:37 PM
> To: veritas-bu at mailman.eng.auburn.edu
> Subject: [Veritas-bu] NBU Encryption Option
>
>
>
>
>
> We're interested in adding the encryption option for Netbackup, and was
> hoping to hear back on anyone's experiences, good or bad?
>
>
>
> Thanks,
>
>             Tristan.
>
>
>
>
>
> ---
>
> Tristan Ball
>
> System Administrator
>
> Vision Systems
>
> +61-3-9211-7064
>
>
>
>
> _______________________________________________
> Veritas-bu maillist  -  Veritas-bu at mailman.eng.auburn.edu
> http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
>
>
>