Veritas NetBackup™ Appliance Capacity Planning and Performance Tuning Guide
- About this Guide
- Section I. Capacity planning
- Analyzing your backup requirements
- Analyzing your backup requirements
- Designing your backup system
- Analyzing your backup requirements
- Section II. Best Practices
- Section III. Performance tuning
- Section IV. Quick reference to Capacity planning and Performance tuning
Does the client require data-in-transit encryption (DTE) for the data being sent to the media server during backups?
Clients with sensitive data may require the data stream to be encrypted over the network when it is transferred to the media server to prevent interception by malicious entities. You can use the data-in-transit encryption (DTE) feature to accomplish the encrypted data transfer.
For detailed information about data-in-transit encryption (DTE), refer to the NetBackup Security and Encryption Guide for version 10.3. Enabling this feature may cause a performance degradation of data transfer rates of 10% or more. The amount of degradation is based on the number of streams that are backed up and the architecture of the clients.
Note:
Starting with NetBackup Appliance version 5.3, for new installations only, this feature is enabled by default in a "preferred on" mode in the global security settings on the primary server. For upgrades to 5.3, the previous settings are retained. Client versions 5.0 and later have this client setting set to AUTOMATIC in the DTE_CLIENT_MODE
registry or the bp.conf file
.
Table: Determining whether to enable DTE
Factors in deciding to enable DTE | Additional comments |
---|---|
Does this client contain sensitive data? | Is the data housed on the client considered sensitive? Does it need additional protection when compared to other clients? Is there any financial, customer, or any other sensitive data? |
What are the business or legal requirements for the data on this client? | Are there any business requirements for the client data? Are there legal or government restrictions on this type of data? Any potential penalties for exposure? |
What is the potential effect if this data were intercepted in transit? | What is the business impact if this data is intercepted? Would it negatively affect revenue, customer goodwill, or have the potential for lawsuits? |