#NVE-Encryption

1 messages · Page 1 of 1 (latest)

hollow apex
#

While NVE is running will ONTAP be able to create new snapshots and SVM-DR? I dont see it in the docs, I believe when I've moved volumes in past, it was not able to snap or SVM-DR the particular volume

thorn fjord
#

NVE works on a lower level, so all volume operations work whether your volumes are encrypted or not

hollow apex
#

I understand that they will work once encryption is finished. My concern is during the move or in-place. During a move snapmirror (SVM-DR) fails on the particular volume, at least in 9.9.1 and 9.10.1. So it is during the time to move I am concerned about.

midnight cobalt
#

Why not create a testvolume, copy some data on it, start the encryption conversion and try it out?

thorn fjord
#

ah, yes, if you do an in-place encryption of a volume that has data, then that will prevent snapmirror from working. Also, it is terribly slow, so much so that it's faster to just create a new encrypted volume and copy the data client-side. Also, if you use volume move to encrypt, then that might also prevent snapmirror while the move is in progress. But once the move is done, everything will work again as before

tired cypress
#

SVM-DR is infinitely more complicated than a snapshot.

#

It should work.

hollow apex
#

I tried in-place of a volume with just under 10TB's. It has been running for 15 hours, and has completed 2%. @thorn fjord you said "terribly slow?" I may call it something else... I'm waiting for a volume move with encryption, I'll post the results. Same size about 10TB
Addendum: In-place encryyption has now been running about 72hours, on a non-used volume with about 10TB of post efficiency data. It has completed 7%.

I started an on-the-fly encryption during a move on the same cluster, and it looks like it will be done in about 12hours. So my question is, why does NetApp even have the optiion available. It may run faster on an AFF, but for a FAS, I would call it false advertising. It is not a usable option.