Veritas-bu

[Veritas-bu] Encryption option

2004-08-23 15:17:48
Subject: [Veritas-bu] Encryption option
From: Dan.Otto AT veritas DOT com (Dan Otto)
Date: Mon, 23 Aug 2004 14:17:48 -0500
This is a multi-part message in MIME format.

------_=_NextPart_001_01C48945.E03E5D4E
Content-Type: text/plain;
        charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Does using encryption affect backup performance, YES, and it can, but
mainly on the client side. There shouldn't be an impact on the servers
themselves.  See below for details.

First the marketing response-

There is no hard data on performance impact of switching on encryption
but in general the less network bandwidth and the slower the client's
CPU, the more noticeable the hit. Every effort has been made to minimize
the performance problems that could occur as a result of implementing
encrypting. The encryption happens on the client not on the media
server. NBU handles the encryption functionality this way because if the
encryption were performed on the NBU media server, some customers might
complain that this extra load on the media server would burden the media
server and lower performance.

=20

Now for the real world response-=20

In reality, enabling encryption on client backups can have up to 3 times
performance impact on backing up that client. The encryption pack uses
software encryption with either a 40 bit or 56bit algorithm and is very
cpu and memory intensive.=20

Therefore you are left with a business impact decision. This performance
is a trade off for using client side encryption. This isn't really a
client platform tuning issue as there is nothing available to tune. It's
your client having the raw resources available (cpu, memory, etc) to
drive the encryption faster.

=20

Dan O

=20

-----Original Message-----
From: Hubler, Daniel [mailto:daniel.hubler AT cobalt-corp DOT com]=20
Sent: Monday, August 23, 2004 2:03 PM
To: veritas-bu AT mailman.eng.auburn DOT edu
Subject: [Veritas-bu] Encryption option

=20

I would like to hear anybody's experiences with the NetBackup encryption
option.=20
This would be for v4.5.=20

Especially interested in information about performance.=20

Thanks.=20





Daniel Hubler=20
Database Administrator=20
TrustSolutions, LLC=20
Milwaukee,  WI=20
daniel.hubler AT cobalt-corp DOT com=20


------_=_NextPart_001_01C48945.E03E5D4E
Content-Type: text/html;
        charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<html>

<head>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii">


<meta name=3DGenerator content=3D"Microsoft Word 10 (filtered)">
<title>Encryption option</title>

<style>
<!--
 /* Font Definitions */
 @font-face
        {font-family:Courier;
        panose-1:2 7 4 9 2 2 5 2 4 4;}
@font-face
        {font-family:Tahoma;
        panose-1:2 11 6 4 3 5 4 4 2 4;}
 /* Style Definitions */
 p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0in;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman";}
a:link, span.MsoHyperlink
        {color:blue;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {color:purple;
        text-decoration:underline;}
p
        {margin-right:0in;
        margin-left:0in;
        font-size:12.0pt;
        font-family:"Times New Roman";}
span.EmailStyle18
        {font-family:Arial;
        color:navy;}
@page Section1
        {size:8.5in 11.0in;
        margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
        {page:Section1;}
-->
</style>

</head>

<body lang=3DEN-US link=3Dblue vlink=3Dpurple>

<div class=3DSection1>

<p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span =
style=3D'font-size:
10.0pt;font-family:Arial;color:navy'>Does using encryption affect backup
performance, YES, and it can, but mainly on the client side. There
shouldn&#8217;t be an impact on the servers themselves. &nbsp;See below =
for
details.</span></font></p>

<p class=3DMsoNormal><b><font size=3D2 color=3Dnavy face=3DArial><span
style=3D'font-size:10.0pt;font-family:Arial;color:navy;font-weight:bold'>=
First
the marketing response-</span></font></b></p>

<p class=3DMsoNormal><font size=3D2 face=3DCourier><span =
style=3D'font-size:10.0pt;
font-family:Courier'>There is no hard data on performance impact of =
switching
on encryption but in general the less network bandwidth and the slower =
the
client's CPU, the more noticeable the hit. Every effort has been made to
minimize the performance problems that could occur as a result of =
implementing
encrypting. The encryption happens on the client not on the media =
server. NBU
handles the encryption functionality this way because if the encryption =
were
performed on the NBU media server, some customers might complain that =
this
extra load on the media server would burden the media server and lower
performance.</span></font></p>

<p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span =
style=3D'font-size:
10.0pt;font-family:Arial;color:navy'>&nbsp;</span></font></p>

<p class=3DMsoNormal><b><font size=3D2 color=3Dnavy face=3DArial><span
style=3D'font-size:10.0pt;font-family:Arial;color:navy;font-weight:bold'>=
Now for
the real world response- </span></font></b></p>

<p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span =
style=3D'font-size:
10.0pt;font-family:Arial;color:navy'>In reality, enabling encryption on =
client
backups can have up to 3 times performance impact on backing up that =
client.
The encryption pack uses software encryption with either a 40 bit or =
56bit
algorithm and is very cpu and memory intensive. </span></font></p>

<p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span =
style=3D'font-size:
10.0pt;font-family:Arial;color:navy'>Therefore you are left with a =
business
impact decision. This performance is a trade off for using client side
encryption. This isn&#8217;t really a client platform tuning issue as =
there is
nothing available to tune. It's your client having the raw resources =
available
(cpu, memory, etc) to drive the encryption faster.</span></font></p>

<p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span =
style=3D'font-size:
10.0pt;font-family:Arial;color:navy'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span =
style=3D'font-size:
10.0pt;font-family:Arial;color:navy'>Dan O</span></font></p>

<p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span =
style=3D'font-size:
10.0pt;font-family:Arial;color:navy'>&nbsp;</span></font></p>

<p class=3DMsoNormal style=3D'margin-left:.5in'><font size=3D2 =
face=3DTahoma><span
style=3D'font-size:10.0pt;font-family:Tahoma'>-----Original =
Message-----<br>
<b><span style=3D'font-weight:bold'>From:</span></b> Hubler, Daniel
[mailto:daniel.hubler AT cobalt-corp DOT com] <br>
<b><span style=3D'font-weight:bold'>Sent:</span></b> </span></font><font =
size=3D2 face=3DTahoma><span =
style=3D'font-size:10.0pt;font-family:Tahoma'>Monday, August
 23, 2004</span></font><font size=3D2 face=3DTahoma><span =
style=3D'font-size:10.0pt;
font-family:Tahoma'> </span></font><font size=3D2 face=3DTahoma><span
 style=3D'font-size:10.0pt;font-family:Tahoma'>2:03 =
PM</span></font><font size=3D2
face=3DTahoma><span style=3D'font-size:10.0pt;font-family:Tahoma'><br>
<b><span style=3D'font-weight:bold'>To:</span></b>
veritas-bu AT mailman.eng.auburn DOT edu<br>
<b><span style=3D'font-weight:bold'>Subject:</span></b> [Veritas-bu] =
Encryption
option</span></font></p>

<p class=3DMsoNormal style=3D'margin-left:.5in'><font size=3D3 =
face=3D"Times New Roman"><span
style=3D'font-size:12.0pt'>&nbsp;</span></font></p>

<p style=3D'margin-left:.5in'><font size=3D2 face=3DArial><span =
style=3D'font-size:
10.0pt;font-family:Arial'>I would like to hear anybody's experiences =
with the
NetBackup encryption option.</span></font> <br>
<font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;font-family:Arial'>This
would be for v4.5.</span></font> </p>

<p style=3D'margin-left:.5in'><font size=3D2 face=3DArial><span =
style=3D'font-size:
10.0pt;font-family:Arial'>Especially interested in information about
performance.</span></font> </p>

<p style=3D'margin-left:.5in'><font size=3D2 face=3DArial><span =
style=3D'font-size:
10.0pt;font-family:Arial'>Thanks.</span></font> </p>

<p class=3DMsoNormal =
style=3D'margin-right:0in;margin-bottom:12.0pt;margin-left:
.5in'><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:12.0pt'><br>
<br>
</span></font></p>

<p style=3D'margin-left:.5in'><font size=3D1 color=3Dpurple =
face=3DArial><span
style=3D'font-size:7.5pt;font-family:Arial;color:purple'>Daniel =
Hubler</span></font>
<br>
<font size=3D1 color=3Dpurple face=3DArial><span =
style=3D'font-size:7.5pt;font-family:
Arial;color:purple'>Database Administrator</span></font> <br>
<font size=3D1 color=3Dpurple face=3DArial><span =
style=3D'font-size:7.5pt;font-family:
Arial;color:purple'>TrustSolutions, LLC</span></font> <br>
<font size=3D1 color=3Dpurple face=3DArial><span =
style=3D'font-size:7.5pt;font-family:
Arial;color:purple'>Milwaukee,&nbsp; WI</span></font> <br>
<font size=3D1 color=3Dpurple face=3DArial><span =
style=3D'font-size:7.5pt;font-family:
Arial;color:purple'>daniel.hubler AT cobalt-corp DOT com</span></font> </p>

</div>

</body>

</html>
=00
------_=_NextPart_001_01C48945.E03E5D4E--

<Prev in Thread] Current Thread [Next in Thread>