Bacula-users

Re: [Bacula-users] Performance problem with baculas encryption system

2008-06-26 04:08:12
Subject: Re: [Bacula-users] Performance problem with baculas encryption system
From: "John Hemming" <johnhemming1 AT googlemail DOT com>
To: bacula-users AT lists.sourceforge DOT net
Date: Thu, 26 Jun 2008 10:08:07 +0200
I can see two implementation possibilities for improving performance:
       - Use HMAC. This effectively makes the backup forgeable by any entity who can read the session keys, but this may not be an issue in your environment.
       - Batch signatures, signing multiple files at once. This is very difficult to achieve in Bacula, as its expected that all components of a file streams will be stored in neighboring streams (ie, next to each other in the backup stream).

There's an additional option if you don't require client-side encryption -- implement encryption in the storage daemon, using batched multi-block signing. I wrote up most of the work necessary to do that here:
       http://www.mail-archive.com/bacula-users AT lists.sourceforge DOT net/msg28860.html


Thank you for your response, I tried to implement those solutions you mentioned but I failed, this may have to do with my lack in experince in programming :)

Of course, it's also possible to turn PKI Signatures off as a workaround, but I wouldn't recommend it.

I tried this but it did not work, at least there was no difference in the average rate and time.

With "PKI Signatures = Yes":
  Elapsed time:           14 mins 48 secs
  Priority:                    10
  FD Files Written:       58,430
  SD Files Written:       58,430
  FD Bytes Written:     4,244,509,936 (4.244 GB)
  SD Bytes Written:     4,268,099,872 (4.268 GB)
  Rate:                        4779.9 KB/s
  Software Compression:   None
  VSS:                         no
  Encryption:                yes

With "PKI Signatures = No":
  Elapsed time:           14 mins 50 secs
  Priority:                    10
  FD Files Written:       58,444
  SD Files Written:       58,444
  FD Bytes Written:     4,250,146,944 (4.250 GB)
  SD Bytes Written:     4,273,742,815 (4.273 GB)
  Rate:                        4775.4 KB/s
  Software Compression:   None
  VSS:                        no
  Encryption:               yes


Maybe there is another solution or someone who can help me to implement those which Landon mentioned.

-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users