Fabric OS Administrator’s Guide 309
53-1002446-01
Chapter
14
In-flight Encryption and Compression
In this chapter
•In-flight encryption and compression overview . . . . . . . . . . . . . . . . . . . . . . 309
•Configuring encryption and compression . . . . . . . . . . . . . . . . . . . . . . . . . . 312
•Encryption and compression example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 317
In-flight encryption and compression overview
The in-flight encryption and compression features of Fabric OS allow frames to be encrypted or
compressed at the egress point of an ISL between two Brocade switches, and then to be decrypted
or decompressed at the ingress point of the ISL. These features use port-based encryption and
compression.
The in-flight encryption and compression features are supported only on 16 Gbps-capable E_Ports
on the Brocade 6510 switch and the Brocade DCX 8510 Backbone family.
The purpose of encryption is to provide security for frames while they are in flight between two
switches. The purpose of compression is for better bandwidth use on the ISLs, especially over long
distance. An average compression ratio of 2:1 is provided. Frames are never left in an encrypted or
compressed state when delivered to an end device. Both ends of the ISL must terminate on 16
Gbps-capable ports.
Encryption and compression can be enabled at the same time for an ISL, or you can enable either
encryption or compression selectively. Figure 49 shows an example of 16 Gbps links connecting
three Brocade switches. One link is configured with encryption and compression, one with just
encryption, and one with just compression.
To Next Page
Loading...
Need help?
General