Re: encrypted filesystems for database files
- From: Kenny Payton <k3nnyp@xxxxxxxxx>
- To: Jeremy Schneider <jeremy.schneider@xxxxxxxxxxxxxx>
- Date: Thu, 18 Sep 2014 06:05:35 -0400
We typically do encryption in our SAN array ( Hitachi ). We are in the
process of testing a SoftLayer cloud deployment and are building a SAN
based on commodity hardware using EMC's ScaleIO software which has an
encryption option at the volume level. The storage servers have SSD's in
them and we can easily saturate a single 10gbit link doing writes with very
little cpu consumption on the storage server. So far I'm pretty impressed
by ScaleIO.
We're also using TDE in a small environment but haven't stressed it at all
to tell the real overhead. Of course the cost is a hard thing to swallow.
There was a post recently on this board that stated ACFS is now free. I'm
pretty sure it has encryption options also but not for sure if they are
also free but might be worth looking at.
Kenny
On Tue, Sep 16, 2014 at 9:11 AM, Jeremy Schneider <
jeremy.schneider@xxxxxxxxxxxxxx> wrote:
> On Mon, Sep 15, 2014 at 1:02 PM, Powell, Mark <mark.powell2@xxxxxx> wrote:
>
>> Isn’t that what Tablespace level TDE basically does for you?
>>
>
> Sure, if you want to pay for it. :)
>
>
>
>> *From:* oracle-l-bounce@xxxxxxxxxxxxx [mailto:
>> oracle-l-bounce@xxxxxxxxxxxxx] *On Behalf Of *April Sims
>> *Sent:* Monday, September 15, 2014 11:34 AM
>> *Subject:* encrypted filesystems for database files
>>
>> Anyone use encryption at the filesystem level for any type of Oracle
>> database files?
>>
> I'm familiar with one case where a customer did this, but it was a
> off-site standby database which really existed more as a backup than a
> standby. It was not intended for actual failover. I haven't yet run a
> live production database on os-level encryption. It would most likely
> work, but I wouldn't expect equal performance to db-level encryption. If
> you've got a small app and you don't want to pay for encryption then it may
> work fine for you. If the business & database grow then it
> may eventually be worth buying advanced security for the db. As always,
> those sorts of decisions are very dependent on your specific situation and
> even then they're not usually black and white...
>
> -Jeremy
>
>
> --
> http://about.me/jeremy_schneider
>
Other related posts:
