Bacula-users

Re: [Bacula-users] Encryption backup using GPG

2009-03-17 14:52:53
Subject: Re: [Bacula-users] Encryption backup using GPG
From: Vladimir Doisan <vdoisan AT giantmarkets DOT com>
To: Lukasz Szybalski <szybalski AT gmail DOT com>
Date: Tue, 17 Mar 2009 14:38:32 -0400
> Currently I do gpg encryption and upload it to amazon s3 but only on
> the files that are "Static archives" aka after x amount of time they
> do not change but we need a copy of them.
> 
> http://lucasmanual.com/mywiki/Bacula#head-53a198d817eca824a1d8ecb3f86c5662303fd668
> 
> I would be interested to know how get bacula backup file to be
> automatically gpg-ed. What are the performance hits on restore when
> going through 20x15gb bacula volumes?
> 
> Thanks,
> Lucas

To automatically encrypt the file volume you will have to put a command
in the "run_after" file. (see my previous email for howto link).
As far as performance hits - below is a set of benches from a while back.:

(this is on single Xeon 2.8 EM64T, 1 Gig RAM with RAID5 running Gentoo
in two separate 64 and 32 bit installs)

GnuPG 1.4.2 Benchmarks (symmetric encryption, no compress)
4.0 Gig backup file
                          GnuPG-64        |           GnuPG-32
---------------------------------------------------------------------------
twofish (256)        253s (16.2 mbps)     |         257s (15.9 mbps)
aes (128)            310s (13.2 mbps)     |         278s (14.7 mbps)
aes192               318s (12.8 mbps)     |         288s (14.2 mbps)
aes256               325s (12.6 mbps)     |         311s (13.2 mbps)


OpenSSL 0.9.7-r2 Benchmarks
4.0 Gig backup file
                       OpenSSL-64         |         OpenSSL-32
---------------------------------------------------------------------------
aes (128)            164s (25.0 mbps)     |         163s (25.1 mbps)
aes192               166s (33.9 mbps)     |         168s (24.4 mbps)
aes256               173s (23.5 mbps)     |         179s (22.9 mbps)

Please note, that Bacula's native implementation of OpenSSL will be a
lot slower (10 times?) because it calculates signatures for each file.






------------------------------------------------------------------------------
Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM) are
powering Web 2.0 with engaging, cross-platform capabilities. Quickly and
easily build your RIAs with Flex Builder, the Eclipse(TM)based development
software that enables intelligent coding and step-through debugging.
Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users

<Prev in Thread] Current Thread [Next in Thread>