Redshift data encryption performance

0

Hello all,

We currently have 200+ TB of data in our redshift cluster, but are not using encryption. To use datashares to share this data across redshift instances, it looks like we'll need to switch encryption on, and we are apprehensive to do so because the performance impact isn't clear for changing this setting. It is also unclear what length of time we should expect for the data to be encrypted.

Thanks!

asked 2 years ago909 views
3 Answers
0

Hello, It is very hard to estimate the time to encrypt all that data. That is the reason we don't use any table or reference for the time that will take. On the other hand, you should always perform an operation like that, on a low period for your cluster usage to reduce impact - https://docs.aws.amazon.com/redshift/latest/mgmt/changing-cluster-encryption.html On performance, per my experience there is not a significant impact but the best option is for you to turn encryption on, test and if it doesn't fit your needs, to turn it off.

please, also keep in mind to use datashare you have to be running on RA3 node types to support this operation.

Hope it helps!

AWS
Hugo_M
answered 2 years ago
0

It is hard to estimate the exact time but The faster Classic resize feature enables an unencrypted cluster to encrypt it much more quickly.

As of today, the Faster Classic Resize option to restore an unencrypted snapshot into an encrypted cluster or to change the encryption key is available only through the AWS CLI. When triggered, the restored cluster operates in read/write mode immediately. The encryption state change for restored blocks that are unencrypted operates in the background, and newly ingested blocks continue to be encrypted. Please refer to the following blog. https://aws.amazon.com/blogs/big-data/accelerate-resize-and-encryption-of-amazon-redshift-clusters-with-faster-classic-resize/

AWS
EXPERT
Nita_S
answered 2 years ago
0

Hello, Have you enabled the encryption for your cluster? how much time it took? we have 900TB in ra3.16x type and want to enable encryption and not sure how to estimate how long the cluster will be unavailable

Yasmeen
answered 2 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions