Veritas-bu

Re: [Veritas-bu] Sun/StorageTek based LTO4 encryption

2010-03-02 09:57:54
Subject: Re: [Veritas-bu] Sun/StorageTek based LTO4 encryption
From: "Shekel Tal" <Tal.Shekel AT uk.fujitsu DOT com>
To: "Len Boyle" <Len.Boyle AT sas DOT com>, "Justin Piszcz" <jpiszcz AT lucidpixels DOT com>, "Kevin C" <kc.on.the.job AT gmail DOT com>
Date: Tue, 2 Mar 2010 14:57:35 -0000
Thanks Len

Did you see Justin's stats?
They seem to show quite a difference between using encryption and not
while using IBM LTO4

Regards,
Tal

IBM LTO-4 ENCRYPTED (RATIO = ~1.5:1)
ABCD25   3     67   02/17/2010 20:00  02/23/2010 00:00   hcart
1188618163     0
               MPX   03/26/2010 00:00        N/A         FULL ENCRYPTION

ABCD36   3    101   02/18/2010 00:12  03/02/2010 00:00   hcart
1239789810     0
               MPX   04/02/2010 00:00        N/A         FULL ENCRYPTION

IBM LTO-4 NO ENCRYPTION (RATIO = ~3.1:1)
ABCD49   2   1144   02/23/2010 02:43  02/26/2010 01:32   hcart
2451541654     0
               MPX   03/19/2010 02:49        N/A         FULL

ABCD50   2   1350   02/26/2010 01:32  03/01/2010 01:05   hcart
2377975447     0
               MPX   03/22/2010 02:05        N/A         FULL

ABCD51   2   1275   02/24/2010 20:01  02/27/2010 10:40   hcart
2575741349     0
               MPX   03/20/2010 11:40        N/A         FULL



-----Original Message-----
From: veritas-bu-bounces AT mailman.eng.auburn DOT edu
[mailto:veritas-bu-bounces AT mailman.eng.auburn DOT edu] On Behalf Of Len
Boyle
Sent: 02 March 2010 13:53
To: Shekel Tal; Justin Piszcz; Kevin C
Cc: veritas-bu AT mailman.eng.auburn DOT edu
Subject: Re: [Veritas-bu] Sun/StorageTek based LTO4 encryption

Tal, 

I can only speak of the IBM LTO4 tape drives, I assume the others are
the same.
IBM says that each block of data to be written to the tape is compressed
or not then encrypted. They do not compress blocks that would grow if
compressed.

Regards len

-----Original Message-----
From: veritas-bu-bounces AT mailman.eng.auburn DOT edu
[mailto:veritas-bu-bounces AT mailman.eng.auburn DOT edu] On Behalf Of Shekel
Tal
Sent: Tuesday, March 02, 2010 8:39 AM
To: Justin Piszcz; Kevin C
Cc: veritas-bu AT mailman.eng.auburn DOT edu
Subject: Re: [Veritas-bu] Sun/StorageTek based LTO4 encryption

I have also been looking at this as an option.
One of the considerations is the effect encryption has on compression.

I have heard you loose the ability to compress effectively when using
compression.

Have you noticed an effect on your tape drive compression when using
tape drive based encryption?

Regards,
Tal

-----Original Message-----
From: veritas-bu-bounces AT mailman.eng.auburn DOT edu
[mailto:veritas-bu-bounces AT mailman.eng.auburn DOT edu] On Behalf Of Justin
Piszcz
Sent: 01 March 2010 21:26
To: Kevin C
Cc: veritas-bu AT mailman.eng.auburn DOT edu
Subject: Re: [Veritas-bu] Sun/StorageTek based LTO4 encryption



On Mon, 1 Mar 2010, Kevin C wrote:

> Sorry if this topic is been discussed before.
>
> Looking for members who have implemented LTO4 based encryption on
> Sun/StorageTek/Oracle platforms, any useful
comments/journeys/guidance. We
> are on HP LTO4 drives with SL500/SL3000 libraries. From what I
understand,
> this pretty much limits us to the StorageTek Crypto Key Management
System w/
> KMA appliances at each library site. The other option, today, is
NetBackup's
> KMS software.
>
> Thank you.
>

I have using the IBM LTO-4 drives with STK libraries, works great, as
long 
the firmware is version 7BG2, I have seen the drive reset itself if the 
firmware is any other version (more recent ones).  Also using NBU & KMS.
It works good, note you can only have 2 volume pools that use
encryption.

Justin.
_______________________________________________
Veritas-bu maillist  -  Veritas-bu AT mailman.eng.auburn DOT edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
_______________________________________________
Veritas-bu maillist  -  Veritas-bu AT mailman.eng.auburn DOT edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu

_______________________________________________
Veritas-bu maillist  -  Veritas-bu AT mailman.eng.auburn DOT edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
_______________________________________________
Veritas-bu maillist  -  Veritas-bu AT mailman.eng.auburn DOT edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu