Disabling The Encryption Engine; Recommendations For Initiator Fan-Ins - Brocade Communications Systems StoreFabric SN6500B Administrator's Manual

Disabling the encryption engine

The disable encryption engine interface command cryptocfg
used only during firmware download, and when the encryption and security capabilities of the
encryption engine have been compromised. When disabling the encryption capabilities of the
encryption engine, be sure the encryption engine is not hosting any CryptoTarget containers. All
CryptoTarget containers hosted on the encryption switch or FS8-18 blade must either be removed
from the encryption engine, or be moved to different encryption engine in an HA Cluster or
encryption group before disabling the encryption and security capabilities.

Recommendations for Initiator Fan-Ins

For optimal performance at reasonable scaling factors of initiators, targets, and LUNs accessed,
Brocade Encryption Engines (EEs) are designed to support a fan-in ratio of between four and eight
initiator ports to one target port, in terms of the number of distinct initiator ports to a Crypto
Container (i.e., a virtual target port corresponding to the physical target port).
An encryption engine has 6 distinct encryption blocks with 4 ports, each port operating at 4 Gbps.
The architecture of the encryption blocks provides the potential for an aggregate 96 Gbps of full
duplex encryption bandwidth, if the performance license is installed.
encryption blocks within an encryption engine, and the host initiator to target port fan-ins. Each
encryption engine can host up to 256 distinct targets with a mapping of 1024 initiators accessing
all the targets. This brings the fan-in ratio for each target to be 1:4 initiators.
FIGURE 102
Fabric OS Encryption Administrator's Guide (SKM/ESKM)
53-1002721-01
Fan-in ratios with performance license installed

Disabling the encryption engine

disableEE [slot number] should be
--
Figure 102
5
shows the
297