Mailing List Archive

Re:
My understanding is that NAE is only available on AFF platforms. As I
understand it, the purpose of NAE is to support NVE in combination with
aggregate de-dupe by sharing the same encryption key for all (or select)
volumes on an aggregate. Maybe I've got that wrong or things have moved on
but assuming FAS systems still don't have aggregate-level de-dupe
functionality... what would be the benefit of NAE over NVE?

When we implemented NVE it was part of an upgrade to FAS 8200 controllers
(CDOT 9.1 at the time). We bought the new controllers with some disks and
scaled-out the cluster so it was simply a case of vol-moving the data to
the 8200 aggregates with the -encrypt flag set. Once that was done we
moved the evacuated stacks over to the 8200s and vol-moved again to balance
the storage and IOPS.



On Mon, 23 Dec 2019 at 13:18, Scott Eno via Toasters <toasters@teaparty.net>
wrote:

>
>
>
> ---------- Forwarded message ----------
> From: Scott Eno <s.eno@me.com>
> To: Chris Hague <Chris_Hague@ajg.com>
> Cc: Tim McCarthy <tmacmd@gmail.com>, "toasters@teaparty.net Lists" <
> toasters@teaparty.net>
> Bcc:
> Date: Mon, 23 Dec 2019 08:15:02 -0500
> Subject: Re: NVE \ NAE
> I was working with a pre-production AFF220 which admittedly didn’t have
> but a few VMware VMFS datastores on it. But those volumes were all
> encrypted easily within the same day.
>
> --
> Scott Eno
> Sr. Storage Engineer
> seno@cooley.com
>
> On Dec 23, 2019, at 4:04 AM, Chris Hague <Chris_Hague@ajg.com> wrote:
>
> ?
>
> Thanks Scott,
>
>
>
> How long did the NVE process take?
>
>
>
> I am trying to estimate time to complete this.
>
> So far, testing is showing our NL-SAS vols taking 10 weeks to encrypt 5TB.
>
>
>
> The above is on a FAS8040.. I’m also going to perform some testing on an
> AFF
>
>
>
> Many Thanks.
>
>
>
>
>
> *From:* Scott Eno <s.eno@me.com>
> *Sent:* 20 December 2019 23:21
> *To:* Chris Hague <Chris_Hague@ajg.com>
> *Cc:* Tim McCarthy <tmacmd@gmail.com>; toasters@teaparty.net Lists <
> toasters@teaparty.net>
> *Subject:* Re: NVE \ NAE
>
>
>
> *[EXTERNAL]*
>
>
>
> I just did this a couple days ago. I had to encrypt the volumes before I
> could encrypt the aggr they were on. Otherwise would have had to evacuate
> the aggr first.
>
> --
>
> Scott Eno
>
>
>
> On Dec 20, 2019, at 9:51 AM, Chris Hague <Chris_Hague@ajg.com> wrote:
>
> ?
>
> Thanks for reply.
>
>
>
> From the doc center we were under the impression that an existing
> aggregate can be converted, doesn’t mention being empty;
>
>
>
>
> https://docs.netapp.com/ontap-9/topic/com.netapp.doc.pow-nve/GUID-812BE553-252E-4B8F-86E6-F71BAF285F71.html?resultof=%22%6e%61%65%22%20
>
>
>
> Convert a non-NAE aggregate to an NAE aggregate
>
> storage aggregate modify -aggregate aggregate_name -node *node_name*
> -encrypt-with-aggr-key true
>
>
>
>
>
>
>
> *From:* Tim McCarthy <tmacmd@gmail.com>
> *Sent:* 20 December 2019 14:37
> *To:* Chris Hague <Chris_Hague@ajg.com>; toasters@teaparty.net Lists <
> toasters@teaparty.net>
> *Subject:* Re: NVE \ NAE
>
>
>
> *[EXTERNAL]*
>
>
>
> Your answers are
>
> Depends (and can feel like forever) for NVE
>
> instantly for aggregate
>
>
>
> The aggregate must be empty to start aggregate encryption
>
>
>
> --tmac (Typos courtesy of GBoard!)
>
>
> ------------------------------
>
> *From:* toasters-bounces@teaparty.net on behalf of Chris Hague <
> chris_hague@ajg.com>
> *Sent:* Friday, December 20, 2019 9:26 AM
> *To:* toasters@teaparty.net Lists
> *Subject:* NVE \ NAE
>
>
>
> Does anyone have a guideline as to the time it takes to apply NVE to an
> existing volume? Or aggregate?
>
>
>
>
> This email is being sent by a subsidiary of Arthur J. Gallagher Holdings
> (UK) Limited, part of the Arthur J. Gallagher & Co. global group of
> companies. For details of the registered office, company number and, where
> applicable, regulated status of our subsidiaries, please visit
> https://www.ajginternational.com/legal-regulatory-information/.
>
> We are the data controller of any personal information you provide to us
> or personal information that has been provided to us by a third party. We
> collect and process information about you in order to arrange insurance
> policies and to process claims. Your information is also used for business
> purposes such as fraud prevention and detection and financial management.
> This may involve sharing your information with third parties such as
> insurers, reinsurers, other brokers, claims handlers, loss adjusters,
> credit reference agencies, service providers, professional advisors, our
> regulators, police and government agencies or fraud prevention agencies.
>
> We may record telephone calls to help us monitor and improve the service
> we provide. For further information on how your information is used and
> your rights in relation to your information please see our privacy notice
> at https://www.ajginternational.com/Privacy-Policy/. If you are providing
> personal data of another individual to us, you must tell them you are
> providing their information to us and show them a copy of this notice.
>
> Where you are obtaining a non-consumer policy of (re)insurance, or cover
> for additional risks or renewal under an existing policy, you are required
> to make a fair presentation of the risk to a (re)insurer which discloses
> every material circumstance which you know or ought to know relating to the
> risk to be insured. A circumstance is material if it would influence the
> judgment of a prudent insurer in determining whether to provide insurance
> for the risk and, if so, on what terms. Disclosure must be reasonably clear
> and accessible to a prudent insurer and made in good faith. The
> aforementioned duty of disclosure is the applicable duty under the laws of
> England and Wales. If your policy is not subject to English law you are
> expected to disclose risk information in accordance with the requirements
> of the applicable law. In such circumstances we expect you will disclose
> risk information at least equal to the standard required under English law
> and where the applicable law requires you to disclose information over and
> above the level required under English law you will provide such
> information in accordance with that law.
>
> Where you are obtaining a consumer policy of insurance, you must read each
> question and answer honestly and fully and must take reasonable care to not
> make a misrepresentation.
>
> Failure to comply with the above disclosure requirements, as they apply to
> you, could mean that your policy of (re)insurance is void, its terms are
> materially altered or that (re)insurers are not liable to pay all or part
> of your claim(s). If you are in any doubt as to your obligations you should
> ask your usual contact.
>
> This e-mail and any attachments are CONFIDENTIAL and may contain legally
> privileged information. If you are not the intended recipient of this
> e-mail message, please telephone or e-mail us immediately, delete this
> message from your system and do not read, copy, distribute, disclose or
> otherwise use this e-mail message and any attachments. Although the above
> company has taken reasonable precautions to ensure this e-mail and any
> attachments are free of any virus or other defect that may affect your
> computer, it is the responsibility of the recipient to ensure that it is
> virus free and the above company does not accept any responsibility for any
> loss or damage arising in any way from its use.
>
>
> This email is being sent by a subsidiary of Arthur J. Gallagher Holdings
> (UK) Limited, part of the Arthur J. Gallagher & Co. global group of
> companies. For details of the registered office, company number and, where
> applicable, regulated status of our subsidiaries, please visit
> https://www.ajginternational.com/legal-regulatory-information/.
>
> We are the data controller of any personal information you provide to us
> or personal information that has been provided to us by a third party. We
> collect and process information about you in order to arrange insurance
> policies and to process claims. Your information is also used for business
> purposes such as fraud prevention and detection and financial management.
> This may involve sharing your information with third parties such as
> insurers, reinsurers, other brokers, claims handlers, loss adjusters,
> credit reference agencies, service providers, professional advisors, our
> regulators, police and government agencies or fraud prevention agencies.
>
> We may record telephone calls to help us monitor and improve the service
> we provide. For further information on how your information is used and
> your rights in relation to your information please see our privacy notice
> at https://www.ajginternational.com/Privacy-Policy/. If you are providing
> personal data of another individual to us, you must tell them you are
> providing their information to us and show them a copy of this notice.
>
> Where you are obtaining a non-consumer policy of (re)insurance, or cover
> for additional risks or renewal under an existing policy, you are required
> to make a fair presentation of the risk to a (re)insurer which discloses
> every material circumstance which you know or ought to know relating to the
> risk to be insured. A circumstance is material if it would influence the
> judgment of a prudent insurer in determining whether to provide insurance
> for the risk and, if so, on what terms. Disclosure must be reasonably clear
> and accessible to a prudent insurer and made in good faith. The
> aforementioned duty of disclosure is the applicable duty under the laws of
> England and Wales. If your policy is not subject to English law you are
> expected to disclose risk information in accordance with the requirements
> of the applicable law. In such circumstances we expect you will disclose
> risk information at least equal to the standard required under English law
> and where the applicable law requires you to disclose information over and
> above the level required under English law you will provide such
> information in accordance with that law.
>
> Where you are obtaining a consumer policy of insurance, you must read each
> question and answer honestly and fully and must take reasonable care to not
> make a misrepresentation.
>
> Failure to comply with the above disclosure requirements, as they apply to
> you, could mean that your policy of (re)insurance is void, its terms are
> materially altered or that (re)insurers are not liable to pay all or part
> of your claim(s). If you are in any doubt as to your obligations you should
> ask your usual contact.
>
> This e-mail and any attachments are CONFIDENTIAL and may contain legally
> privileged information. If you are not the intended recipient of this
> e-mail message, please telephone or e-mail us immediately, delete this
> message from your system and do not read, copy, distribute, disclose or
> otherwise use this e-mail message and any attachments. Although the above
> company has taken reasonable precautions to ensure this e-mail and any
> attachments are free of any virus or other defect that may affect your
> computer, it is the responsibility of the recipient to ensure that it is
> virus free and the above company does not accept any responsibility for any
> loss or damage arising in any way from its use.
> _______________________________________________
> Toasters mailing list
> Toasters@teaparty.net
> http://www.teaparty.net/mailman/listinfo/toasters
>
>
> This email is being sent by a subsidiary of Arthur J. Gallagher Holdings
> (UK) Limited, part of the Arthur J. Gallagher & Co. global group of
> companies. For details of the registered office, company number and, where
> applicable, regulated status of our subsidiaries, please visit
> https://www.ajginternational.com/legal-regulatory-information/.
>
> We are the data controller of any personal information you provide to us
> or personal information that has been provided to us by a third party. We
> collect and process information about you in order to arrange insurance
> policies and to process claims. Your information is also used for business
> purposes such as fraud prevention and detection and financial management.
> This may involve sharing your information with third parties such as
> insurers, reinsurers, other brokers, claims handlers, loss adjusters,
> credit reference agencies, service providers, professional advisors, our
> regulators, police and government agencies or fraud prevention agencies.
>
> We may record telephone calls to help us monitor and improve the service
> we provide. For further information on how your information is used and
> your rights in relation to your information please see our privacy notice
> at https://www.ajginternational.com/Privacy-Policy/. If you are providing
> personal data of another individual to us, you must tell them you are
> providing their information to us and show them a copy of this notice.
>
> Where you are obtaining a non-consumer policy of (re)insurance, or cover
> for additional risks or renewal under an existing policy, you are required
> to make a fair presentation of the risk to a (re)insurer which discloses
> every material circumstance which you know or ought to know relating to the
> risk to be insured. A circumstance is material if it would influence the
> judgment of a prudent insurer in determining whether to provide insurance
> for the risk and, if so, on what terms. Disclosure must be reasonably clear
> and accessible to a prudent insurer and made in good faith. The
> aforementioned duty of disclosure is the applicable duty under the laws of
> England and Wales. If your policy is not subject to English law you are
> expected to disclose risk information in accordance with the requirements
> of the applicable law. In such circumstances we expect you will disclose
> risk information at least equal to the standard required under English law
> and where the applicable law requires you to disclose information over and
> above the level required under English law you will provide such
> information in accordance with that law.
>
> Where you are obtaining a consumer policy of insurance, you must read each
> question and answer honestly and fully and must take reasonable care to not
> make a misrepresentation.
>
> Failure to comply with the above disclosure requirements, as they apply to
> you, could mean that your policy of (re)insurance is void, its terms are
> materially altered or that (re)insurers are not liable to pay all or part
> of your claim(s). If you are in any doubt as to your obligations you should
> ask your usual contact.
>
> This e-mail and any attachments are CONFIDENTIAL and may contain legally
> privileged information. If you are not the intended recipient of this
> e-mail message, please telephone or e-mail us immediately, delete this
> message from your system and do not read, copy, distribute, disclose or
> otherwise use this e-mail message and any attachments. Although the above
> company has taken reasonable precautions to ensure this e-mail and any
> attachments are free of any virus or other defect that may affect your
> computer, it is the responsibility of the recipient to ensure that it is
> virus free and the above company does not accept any responsibility for any
> loss or damage arising in any way from its use.
>
>
>
>
> ---------- Forwarded message ----------
> From: Scott Eno via Toasters <toasters@teaparty.net>
> To: Chris Hague <Chris_Hague@ajg.com>
> Cc: "toasters@teaparty.net Lists" <toasters@teaparty.net>
> Bcc:
> Date: Mon, 23 Dec 2019 13:15:09 GMT
> Subject:
> _______________________________________________
> Toasters mailing list
> Toasters@teaparty.net
> http://www.teaparty.net/mailman/listinfo/toasters
>