Andrey Dmitriev wrote: > Dear list, > > 1) > It was shared with me that bacula encrypts 'per client' not 'per job'. > We first backup data to disk, and then to tape. We don't really need to > encrypt to disk, but would like to do so to tape, is there a workaround? > 2) do any HW crypto acceleratoin PCI cards work with Bacula, and can > anyone share their experience using them. > 3) anyone using any appliances sitting in between the server and the > tape drive to do encryption, or can point to some solutions? > > Thanks, > Andrey > > > 1. This is not an existing feature, but one which has been requested: "Storage Daemon Encryption". AFAIK the Bacula project is in a voting phase to determine which features the team should focus on. This should be the link to the survey: http://www.surveymonkey.com/s.aspx?sm=kkjFYxNdgB2fAEntWBWhuw_3d_3d
2. No, Bacula does not invoke any OpenSSL engine selection, nor do I believe that it reads the openssl.cnf which could suggest it to do so. My experience with forcing it to use the *BSD cryptodev engine has been mixed. 3. I haven't used anything like this, and I imagine it would be difficult as the SCSI commands would have to be in plaintext while data would have to be encrypted. Some vendors produce tape drives with encryption built-in. -Steve ------------------------------------------------------------------------------ The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your production scanning environment may not be a perfect world - but thanks to Kodak, there's a perfect scanner to get the job done! With the NEW KODAK i700 Series Scanner you'll get full speed at 300 dpi even with all image processing features enabled. http://p.sf.net/sfu/kodak-com _______________________________________________ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
