nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

FlashCache and NSE

NeilMurphy

Hi All,

I'm just reviewing the FlashCache and FlashPool SE presentation (search for "SE presentation Flash Cache" on Field Portal) and I read that FlashCache is "not a good option with NetApp Storage Encryption (NSE) systems".

Does anyone have a technical explanation of why this is?

Cheers,

Neil.

Find more posts tagged with

Accepted answers

NeilMurphy

I just got this update from another guy on the NetApp technical marketing team:

In my experience, customers who want the FIPS 140-2 Level 2 validated encryption of NSE systems require persistently-cached data to be encrypted as well. Since NSE systems rely on the drives (HDDs and SSDs) to encrypt data at rest, Flash Pool with encrypting SSDs in the only hybrid FAS configuration that meets this requirement.

All comments

Damien_Queen

I believe that recommendation based on the assumption that FlashCache is not encrypted and might be a way to access (some) of the encrypted data.

NeilMurphy

Hi Damien,

Yep, I was thinking that might be the reasoning but then I was trying to think of a way that data in the cache could be accessed without going through the host that has direct access to the underlying volume and I can't see how that could be done easily (although, where there's a will...). I wonder is there any other reson why it's not recommended.

Cheers,

Neil.

Damien_Queen

Even though FlashCache looses its data during reboot, it doesn’t mean data couldn’t be restored with advanced techniques.

There are no other reasons for my knowledge.

You can try to reach the person who made the presentation to ask what he/she means by “not best suitable”.

NeilMurphy

Hi Damien,

I went with your suggestion and emailed the team responsible for the content of the presentation (ng-aff-fas-tme@netapp.com). I'll post their reply here when I get it.

One of the reasons for my confusion is that the presentation says that you can use Flash Cache with NVE. But surely the problem of data being held in FlashCache in unencrypted form is still there? Or maybe not?

Cheers,

Neil.