RSS Encryption Performance Hit?

IDS 12.10FC3 Solaris 10 1/13 Is there any significant performance hit to enabling encryption for RSS? Is enabling RSS encryption really as simple as just setting ENCRYPT_SMX (and any desired optional ENCRYPT_* parms) on both ends (we have only a primary and one secondary)? Thank you. DG

Since RSS is a special case of HDR, does ENCRYPT_HDR also have to be set? DG

Original post: IDS 12.10FC3 Solaris 10 1/13 Is there any significant performance hit to enabling encryption for RSS? Is enabling RSS encryption really as simple as just setting ENCRYPT_SMX (and any desired optional ENCRYPT_* parms) on both ends (we have only a primary and one secondary)? Thank you. DG Response: I can't really speak to the performance hit of enabling encryption...I would expect it to take some amount more cpu cycles to encrypt and de-crypt the buffers on both sides, but exactly how expensive that is I'm not sure. It would likely have a bigger impact if your machine was already either maxed out on cpu usage or nearly maxed out (such that you didn't have cpu usage to spare for the encryption action). But as for just having to set ENCRYPT_SMX, yeah that should be all you have to do. You do not have to set ENCRYPT_HDR, that is specific to encrypt HDR data between HDR servers. It's separate because HDR doesn't use SMX to send it's log data between the 2 servers, while RSS and SDS does use SMX. Jacques Renaut HCL Informix Advanced Support

Does ENCRYPT_SMX need to be set only on the RSS, only on the Primary, or on both? After enabling this network encryption, how can one verify that it is operating? Thank you. DG