1. NetBackup Encryption Option Info for Solution Engineers
Original creation date: May 2005
For Internal Use Only 1 38 2

2. NetBackup Encryption Option implementation details
Software based encryption affects backup performance on 2 levels
Increases time to complete backup based on the bit-level of encryption
CPU utilization increases at the client for both backup and recovery
Recommend encrypting only customer related data
An approximation of performance impact**
See the Encryption Performance Notes in the NetBackup 5.1 datasheets section on VNET for more information on the test parameter and equipment used. The encryption option for 5.x (5.1 and higher) and NetBackup 6.0 are identical and function the same. In Summer 2005, the NetBackup team will perform more testing of the encryption option.
VNET:
Preliminary performance tests for encryption showed the following. Additional performance testing will be done in summer 2005.
Backup time increase
Standard (128 / 256 bit) = 45-50% increase (128/256 bit)
Legacy (40 / 56 bit) = 12-17% increase (40/56 bit)
CPU utilization times
Standard = 15% increase (128/256 bit)
Legacy = 25% increase (40/56 bit)
** Internal VERITAS test data. Results will vary for customers based on data and hardware

3. Preliminary Encryption Option Performance - Baseline
Note the relatively small performance difference between 128 & 256-AES.
This slide shows the range of absolute values for CPU utilization and elapsed time from no encryption to 256-AES. We refer to this as prelimnary data because we have not measured performance with multi-processor machines and various types of data. For this reason we recommend proceeding with implementation on a step-by-step basis. A
Full details of the test can be found at the VNET link below.
VNET: