Hi,
NBU version ; 7.6.1
We are using client encryption for most of our servers.
I am aware that client encryption enabled in the policy consumes more CPU space in the client and takes a long time for completion of backup.
per https://www-secure.symantec.com/connect/forums/encryption-key-check
5TB file server is backed up using client encryption to pure disk dedupe.
As expected,
With encryption in policy enabled,
7/27/2015 5:10:23 AM - Info ebu-f15.hq.local(pid=3512) StorageServer=PureDisk:ebu-f14.hq.local; Report=PDDO Stats for (ebu-f15.hq.local): scanned: 5954499632 KB, CR sent: 5953568857 KB, CR sent over FC: 0 KB, dedup: 0.0%, cache hits: 0 (0.0%)7/27/2015 5:10:33 AM - Info bpbkar32(pid=7712) bpbkar waited 2844 times for empty buffer, delayed 170637 times.
Without encryption in policy disabled,
7/19/2015 7:40:24 AM - Info ebu-f15.hq.local(pid=16320) StorageServer=PureDisk:ebu-f14.hq.local; Report=PDDO Stats (multi-threaded stream used) for (pfg-bu4.pfg-hq.local): scanned: 5596394508 KB, CR sent: 30214477 KB, CR sent over FC: 0 KB, dedup: 99.5%, cache hits: 1636389 (3.4%), rebased: 97060 (0.2%)7/19/2015 7:40:30 AM - end writing; write time: 31:35:18
Dedupe is difference value is large with and without encryption enabled.
Moreover, each LTO6 tape (Hardware compression is enabled) consumed around 3.9TB for data without encryption. Only 2.4TB is consumed per tape with encryption enabled. Believe, hardware compression doesnt work well with encrypted data.
Believe if MSEO is enabled, amount of storage consumed by tape wont change much. However, puredisk dedupe may work as expected.
Which is the best way of using encryption? We dont have requirement of encrypting data before the tapes leave datacenter.
Is TL encryption the best way to save space. Believe, it starts to encrypt the data after compressing it.
