Proxmox Backup Server disable Transport-Encryption for already secure network

4920441

Member
Dec 7, 2021
32
1
13
54
Hi,
is it possible to disable the Transport Encryption for the Proxmox backup server when communicating with a client?

Reason for this is, that my Backup server has a rather small CPU (Intel Atom 3xxx something) whicht is not very potent in decrypting, but is able to write to the disks saturating a 10 GBit link - which is only local in a seperate vlan with no public access, So I could get the full wirespeed without encryption, but with encryption it's only a fragment.

Would be nice, if someone has an Idea, despite throwing new more powerful hardware towart that problem -:-)


Cheers

4920441
 
Hi,
is it possible to disable the Transport Encryption for the Proxmox backup server when communicating with a client?
no, there is no option to disable TLS.
 
  • Like
Reactions: Johannes S
Hi, is there a way to make a feature request about this?

As mentioned, we do have in all our datacentres a sepearate local backup network, and the performance (thus cpu use) would be way better without encryption in this case.

I totally agree with you, If you don't have such infrastructure, encryption is absolutely mandatory. But in my experience, a seperate backup infrastructure is not uncommon in datacentres.

Cheers

4920441
 
Hi, is there a way to make a feature request about this?

As mentioned, we do have in all our datacentres a sepearate local backup network, and the performance (thus cpu use) would be way better without encryption in this case.

I totally agree with you, If you don't have such infrastructure, encryption is absolutely mandatory. But in my experience, a seperate backup infrastructure is not uncommon in datacentres.

Cheers

4920441
This has already been requested, see https://bugzilla.proxmox.com/show_bug.cgi?id=5481 and if compression is limiting your speeds also https://bugzilla.proxmox.com/show_bug.cgi?id=4900. Please add/subscribe to these issues instead of creating new ones, thanks!
 
In your World, Germany - EU is this not possible. Russland is hacking the EU.
I doubt Russia has access in our datacentre internal only network. As I said, if it its in a public environment, sure, thats a problem, but there I would dare to use anything without authentication and encryption.
 
I doubt Russia has access in our datacentre internal only network. As I said, if it its in a public environment, sure, thats a problem, but there I would dare to use anything without authentication and encryption.
If you are willing to take the risks that's legitimate. I wouldn't be so sure about it though since in todays computing most computers have somehow direct or indirect contact to the outside world.
 
If you are willing to take the risks that's legitimate. I wouldn't be so sure about it though since in todays computing most computers have somehow direct or indirect contact to the outside world.

Did you ever hear about something like an airgap configuration?
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!