Re: [Bacula-users] Possibility of parallelising encryption?

2010-04-08 Thread Craig Ringer
On 8/04/2010 8:03 PM, Phil Stracchino wrote: > On 04/08/10 02:16, Craig Ringer wrote: >> Bacula should probably work with Intel's hardware crypto out of the box. >> If it doesn't, most likely all that'd be required would be to call: >> >> ENGINE_load_builtin_engines(); >> ENGINE_r

Re: [Bacula-users] Possibility of parallelising encryption?

2010-04-08 Thread Phil Stracchino
On 04/08/10 02:16, Craig Ringer wrote: > Bacula should probably work with Intel's hardware crypto out of the box. > If it doesn't, most likely all that'd be required would be to call: > > ENGINE_load_builtin_engines(); > ENGINE_register_all_complete(); > > in init_crypto() , and:

Re: [Bacula-users] Possibility of parallelising encryption?

2010-04-07 Thread Craig Ringer
Phil Stracchino wrote: > FWIW, memory says we tried using GnuTLS once. It turns out that for > this purpose it is (or was) horribly broken. In fact, at the time, I > seem to recall the mere presence of Red Hat's GnuTLS lib broke Bacula > altogether. Yeah. I've found it to be pretty broken in ot

Re: [Bacula-users] Possibility of parallelising encryption?

2010-04-07 Thread Richard Scobie
Craig Ringer wrote: Snip interesting crypto discussion... >> I'd use the hardware encryption (which presumably has no performance >> impact), that is an option on this autochanger, except they want $2500 >> for it... > > Probably because it has a custom ASIC for the crypto algorithm in use to > a

Re: [Bacula-users] Possibility of parallelising encryption?

2010-04-07 Thread Phil Stracchino
On 04/07/10 05:09, Craig Ringer wrote: > Richard Scobie wrote: >> Would it be possible to optimise this task by perhaps reading data in >> "chunks", which in turn can be encrypted by a core each, before being >> recombined and written out to tape? > > Bacula uses OpenSSL for crypto support. It d

Re: [Bacula-users] Possibility of parallelising encryption?

2010-04-07 Thread Craig Ringer
Richard Scobie wrote: > I have a 2.8GHz Core i7 machine backing up uncompressable data spooled > onto an 8 drive RAID5, to LTO-4 tape. > > Our requirements now dictate that data encryption must be used on the > tapes and having configured this, it seems that one core is saturated > encrypting t

Re: [Bacula-users] Possibility of parallelising encryption?

2010-04-07 Thread Craig Ringer
Richard Scobie wrote: > I have a 2.8GHz Core i7 machine backing up uncompressable data spooled > onto an 8 drive RAID5, to LTO-4 tape. > > Our requirements now dictate that data encryption must be used on the > tapes and having configured this, it seems that one core is saturated > encrypting t

Re: [Bacula-users] Possibility of parallelising encryption?

2010-03-28 Thread Peter Zenge
o: bacula-users Subject: [Bacula-users] Possibility of parallelising encryption? I have a 2.8GHz Core i7 machine backing up uncompressable data spooled onto an 8 drive RAID5, to LTO-4 tape. Our requirements now dictate that data encryption must be used on the tapes and having configured this, it

[Bacula-users] Possibility of parallelising encryption?

2010-03-28 Thread Richard Scobie
I have a 2.8GHz Core i7 machine backing up uncompressable data spooled onto an 8 drive RAID5, to LTO-4 tape. Our requirements now dictate that data encryption must be used on the tapes and having configured this, it seems that one core is saturated encrypting the data and the result is that tap