|
Re: [Veritas-bu] NETBACKUP WITH ENCRYPTION OPTION
2009-08-07 17:30:03
On Fri, Aug 7, 2009 at 3:49 PM, Daniel Otto <dan_otto AT symantec DOT com> wrote:
When you use NBU client side encryption it removes any repeatable
patterns that the tape drive hardware compression works off. So there is
nothing to compress and so you end up using more tape space.
The only way to get around this issue is to also run with client side
compression since NBU will compress first then encrypt. But it adds even
more delays to the backup time. I would figure a fudge facture of 2-3
times increase in the backup time an average with both options in play.
And this is why people using encryption in a big way buy custom-built appliances (e.g. Decru DataFort). These do compression and encryption at wire speed and don't impact the clients.
Doing client-side encryption is probably okay if you have 1 or 2 small clients. Larger environments can use media-server based encryption since your media servers will typically be bigger/better/faster than the clients. Get bigger and you're into something like the DataForts. Get even bigger and you go for something like the Brocade encrypting blade/switch.
.../Ed
Ed Wilts, RHCE, BCFP, BCSD, SCSP, SCSE
ewilts AT ewilts DOT org
_______________________________________________
Veritas-bu maillist - Veritas-bu AT mailman.eng.auburn DOT edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
|
|
|
