Backup Speed with Encryption

[Benji Philpott]

Hi,

I am using BareOS 21 and one client, we have an image server, meaning lots of small files.  It is a Windows server and I am backing up the files. When I perform a full backup with encryption it takes approx 31 hours (approx 220GB of data in 5.8 million files).  However, if I do not use encryption it takes about 15-16 hours to complete.

I have this in my config on the FD on the client server:
  PKI Signatures = Yes
  PKI Encryption = Yes
  PKI Keypair    = "C:/ProgramData/Bareos/bareos-fd.d/keys/serverclient-fd.pem"
  PKI Master Key = "C:/ProgramData/Bareos/bareos-fd.d/keys/master.pub.key"
  PKI Cipher     = aes256

For my servers with larger files, there is not much difference in backup times. I prefer to use encryption, of course, but this one server really slows down my backup and makes updates/reboots difficult so I don't interrupt the backups. Is there anything I can do to increase the speed of my backup while still employing encryption?

[Bruno Friedmann]

Did you check if this Virtual Machine can handle aes natively (by passing cpu component from the host to the VM). Maybe this is can help.

[Benji Philpott]

Hi, thank you for the reply.  

This one is actually a physical server, so I would assume the Xeon should handle aes natively, but that is something to look into.

On Tuesday, August 2, 2022 at 2:26:12 AM UTC-5 Bruno Friedmann wrote:

Did you check if this Virtual Machine can handle aes natively (by passing cpu component from the host to the VM). Maybe this is can help.

[Andreas Rogge]

Hi,

I understand I'm somewhat late to the party, but when I hear performance
issue in combination with Windows and small files I have to ask: do you
have a virus scanner installed on that machine? Does it check every file
when the FD looks at them?

Best Regards,
Andreas
--
Andreas Rogge andrea...@bareos.com
Bareos GmbH & Co. KG Phone: +49 221-630693-86
http://www.bareos.com

Sitz der Gesellschaft: Köln | Amtsgericht Köln: HRA 29646
Komplementär: Bareos Verwaltungs-GmbH
Geschäftsführer: S. Dühr, M. Außendorf, J. Steffens, Philipp Storz

[Benji Philpott]

I do have AV and I'm sure it is scanning all activity.  I think I did exempt the AV software.  I eventually just had to make that server unencrypted backups and encrypted everything else.