Unsolved
This post is more than 5 years old
9 Posts
0
3490
July 28th, 2014 19:00
Does encrypting data at rest affect backup?
We are going to implement encryption on data at rest and i am concerned that it will affect my backup in particular my SQL DB.
I am currently using Networker and would like to check if applying encyption on data at rest affect my back?
If yes, is there anything i can do to perform the backup?
Thanks
No Events found!
ble1
2 Intern
•
14.3K Posts
0
July 29th, 2014 02:00
Data at rest on backup storage side or primary storage?
ngkimleong
9 Posts
0
July 29th, 2014 21:00
Data at rest will be on primary storage.
ble1
2 Intern
•
14.3K Posts
1
July 30th, 2014 01:00
Whenever you read data it will need to be decrypted and that may have impact on performance, but modern solution usually relay on fast HW based cards sitting between disk and software layer like application so impact is much less to be of any concern. If using software based encryption it might have some impact, but it shouldn't be that high nowadays. I guess, before you go live you will have proof of concept and test of this kind involving backup and restore should be performed and compared.
ngkimleong
9 Posts
0
July 30th, 2014 04:00
Does that mean I have to decrypted the data before I do any backup?
Is it possible to leverage snapshot at the block level so that I do not have to decrypt my data before backup?
ble1
2 Intern
•
14.3K Posts
0
July 30th, 2014 05:00
You didn't say how it will be encrypted in first place, but I assume same process which encrypts data during write will run decrypt during read and this should be automatic.
ngkimleong
9 Posts
0
July 31st, 2014 07:00
The encrypt and decrypt by the same process used by the backup should be the norm but that backup of the SQL DB will be in plain text.
I looking for solutions to backup the SQL DB with encryption as it is.
Any possible solution will be helpful.
Thanks.
ble1
2 Intern
•
14.3K Posts
0
July 31st, 2014 08:00
As it is - where? On disk from OS or application point of view, on disk array from its point of view? If you are transferring data from A to B, which is what you do with backup, then either this is done online where you must decrypt it or offline where you do not have necessary do that, but such backup would be offline (eg. snapshot of encrypted data on disk from OS/application point of view) and could only be restored by original client most likely (in presence with original crypt routine).