RSS Encryption Performance Hit?
David Grove (IDS 12.10FC3, Solaris 10) asked about the performance cost of RSS encryption and whether setting ENCRYPT_SMX is enough. Jacques Renaut of HCL said it should use more CPU, that ENCRYPT_SMX alone suffices for RSS/SDS, and ENCRYPT_HDR applies only to HDR. David then asked where ENCRYPT_SMX must be set and how to verify it. Unanswered.
Auto-generated by Claude from the posts below — may be imperfect; read the full thread.
IDS 12.10FC3 Solaris 10 1/13 Is there any significant performance hit to enabling encryption for RSS? Is enabling RSS encryption really as simple as just setting ENCRYPT_SMX (and any desired optional ENCRYPT_* parms) on both ends (we have only a primary and one secondary)? Thank you. DG
Since RSS is a special case of HDR, does ENCRYPT_HDR also have to be set? DG
Original post: IDS 12.10FC3 Solaris 10 1/13 Is there any significant performance hit to enabling encryption for RSS? Is enabling RSS encryption really as simple as just setting ENCRYPT_SMX (and any desired optional ENCRYPT_* parms) on both ends (we have only a primary and one secondary)? Thank you. DG Response: I can't really speak to the performance hit of enabling encryption...I would expect it to take some amount more cpu cycles to encrypt and de-crypt the buffers on both sides, but exactly how expensive that is I'm not sure. It would likely have a bigger impact if your machine was already either maxed out on cpu usage or nearly maxed out (such that you didn't have cpu usage to spare for the encryption action). But as for just having to set ENCRYPT_SMX, yeah that should be all you have to do. You do not have to set ENCRYPT_HDR, that is specific to encrypt HDR data between HDR servers. It's separate because HDR doesn't use SMX to send it's log data between the 2 servers, while RSS and SDS does use SMX. Jacques Renaut HCL Informix Advanced Support
Does ENCRYPT_SMX need to be set only on the RSS, only on the Primary, or on both? After enabling this network encryption, how can one verify that it is operating? Thank you. DG