Questions related to backup encryption in 9.5?

Everything about backing up to tape

Questions related to backup encryption in 9.5?

Veeam Logoby cerberus » Fri Aug 18, 2017 3:07 pm

Hello,

We are running Veeam BR 9/5 with latest Update 2. Our process is to B2D2T - reverse incremental nightly so that tapes being offloaded to tape are full backups.

Our tape library is a Dell ML6xxx with dual LTO7 drives - everything works well and tapes get about 300MB/s each during B2T stage and bottleneck is target.

I am looking to enable encryption (going to do some performance testing soon); I know we can enable encryption at the backup to disk job or the backup to tape job (mediapool).

Anyone out there using encryption already - what is your experience? Which is better in terms of performance?

When we're talking about hardware encryption on tapes, how does this work? Will Veeam query the tape hardware and figure out if it can leverage hardware encryption and fallback to software if it cannot? Or is there something we need to do on the tape library itself to leverage hardware encryption?

Is there a way (via command line or something) to test to see if Veeam will be able to leverage hardware encryption on the tapes without actually running a backup to tape job?

Thanks.
cerberus
Enthusiast
 
Posts: 34
Liked: 3 times
Joined: Fri Aug 28, 2015 2:45 pm
Full Name: MD

Re: Questions related to backup encryption in 9.5?

Veeam Logoby v.Eremin » Mon Aug 21, 2017 4:18 pm

Anyone out there using encryption already - what is your experience?

If there is a need to encrypt source backup data, then, stick to backup job encryption. Otherwise, leverage the one available at media pool level.

When we're talking about hardware encryption on tapes, how does this work?

Backup server delegates encryption task to native device mechanisms. More information can be found here.

Will Veeam query the tape hardware and figure out if it can leverage hardware encryption and fallback to software if it cannot?

Correct.

Or is there something we need to do on the tape library itself to leverage hardware encryption?

Encryption needs to be enabled on device level.

Is there a way (via command line or something) to test to see if Veeam will be able to leverage hardware encryption on the tapes without actually running a backup to tape job?

Everything should work fine, as long as tape device supports encryption.
v.Eremin
Veeam Software
 
Posts: 13428
Liked: 987 times
Joined: Fri Oct 26, 2012 3:28 pm
Full Name: Vladimir Eremin


Return to Tape



Who is online

Users browsing this forum: No registered users and 8 guests