Comparing performance between TDE encryption and no encryption

Hi all,
How can i check, how much database resource (%CPU, Time elapsed) increased when using TDE encryption.
Thank you!
Dan.
Edited by: Dan on Jul 10, 2011 10:13 PM

The performance implications of using TDE are going to depend on a number of factors including
- The version of Oracle
- The hardware available (in particular whether hardware acceleration is available for encryption)
- Whether you are using tablespace encryption or column-level encryption
- If you are using column-level encryption how many columns you are encrypting
- What sort of workload your system is doing.
- Where your system bottlenecks today without encryption
Without knowing those things, it's hard to narrow down the answer to somewhere between 0 and 50% which is, obviously, far too large a range to be meaningful.
On the one hand, the worst case is probably represented by this test case where you're using column-level encryption of one column of a two column table in 10.2 and doing single-row inserts and deletes. Those operations are already heavily CPU bound and, since you're using column-level encryption, the data has to be encrypted and decrypted every time it goes into or out of the SGA. If you were using tablespace-level encryption, the data would only need to be encrypted and decrypted when it is read from or written to the disk which would be far faster in for this test case. Later versions of Oracle also tend to be more efficient.
On the other hand, if you're using 11.2 with the most recent patches and you've got hardware acceleration, Oracle is happy to trumpet the [urlhttp://www.oracle.com/technetwork/database/options/advanced-security/index-099011.html]near-zero performance impact of TDE.
Most people live somewhere between these two extremes but it's hard to guess where your particular application falls. I would guess that most people would see something like a 10-15% increase in CPU consumption but that's just a wild guess based on a relatively small sample of systems.
Justin

Similar Messages

  • Compare performance SUN SPARC IV+ and SPARC VII

    Anyone have experience on SUN Sparc VII and Compare Performance between SUN Sparc IV+ and Sparc VII ?
    Thank.

    read http://blogs.sun.com/mrbenchmark/
    particularly http://blogs.sun.com/mrbenchmark/entry/oltp_performance_of_the_sun

  • Improving Performance between WRT610N (v1) and WET610N (v1)

    Any advice on how to improve performance of the connection between these two Wireless N devices?
    WRT610N (v1) and WET610N (v1)
    We have a PS3 connected to the WET610N via Ethernet directly, and it connects the PS3 communication wirelessly to the Internet through the WRT610N.  Just wondering if there are some known tweaks that will improve performance between them.  One thing I think is ridiculous is that the WRT610N is showing only 30% signal strength on the WET610N.  That is ridiculous as they are not far from eachother.
    Any input is welcome!

    Whats the Distance between your Router and the Bridge? Are you connected to 5GHz wireless network or 2.4GHz wireless network?  Whats the Wireless Settings you have setup on your Router.

  • Differences in compare editor between JDeveloper 10 and 11

    I have some code that previously opened a split-view editor with files side by side. For JDeveloper 10 the code was roughly:
    DifferenceBlock db = new DifferenceBlock(DifferenceBlock.TYPE_NOCHANGE);
    db.setFirstStart(start1);
    db.setFirstLength(length1);
    db.setSecondStart(start2);
    db.setSecondLength(length2);
    URLContributor contr1 = new URLContributor(url1);
    URLContributor contr2 = new URLContributor(url2);
    CompareModel model = new TextCompareModel(contr1, contr2, new DifferenceBlock[] { db });
    CompareNode compareNode = new CompareNode(CompareURLHelper.newCompareURL(contr1, contr2, 0));
    compareNode.setModel(model);
    compareNode.setSource(contr1);
    compareNode.setTarget(contr2);
    EditorUtil.openDefaultEditorInFrame(compareNode);
    Running this code on 11 does not work and gets NoClassDefFoundError. I tried to browse the API for 11 and found oracle.oracle.javatools.compare.CompareView but am unsure how properly use it. I also noticed that it was part of the API since 10 so perhaps the previous way of doing it was not the preferred way? If I could write the code in such a way that it works on both 10 and 11 it would be ideal but it is not a necessity. Mostly I am just looking for some examples to see how a comparison editor would normally be set up and opened.

    Hi Paul,
    I tried it in 11 and as you said those classes are there and the compare editor opened successfully. There is one remaining issue which I need to figure out and that is how to add differences to the compare editor. Ultimately what is being compared are two files that contain duplicate code. I would like to have any differences between the two files suppressed and then be able to specify what items are highlighted. For example, if there was a duplicated method between the two files I would like to be able to have the method highlighted in one file with a connector to the method highlighted in the other file and nothing else highlighted. Is there a way to access the compare editor after it has been opened and specify the differences? In my previous code I was able to specify the differences using the DifferenceBlock and passing it as a parameter to a CompareModel. Using CompareViewer.get().show() omits this step.
    Another smaller side issue is that sometimes duplicated code would exist within the same file. I noticed that opening a compare editor with the same file in both panes gives a warning message saying that the files are identical. Is there a way to suppress this?
    Thank you,
    Jason

  • Compare performance with EJB2.x and Spring2.x

    Hi i am planning to migrate my application from EJB2.x to Spring2.x,
    i am using weblogic as an Application server.
    what about the performance when compared to EJB nd Spring2.x?
    kasim

    impossible to say. And kinda exercise pointlesstoo,
    Spring isn't a 1:1 replacement for EJB.why it is impossible? since EJB uses application
    container, which in tern calls many steps inside, i
    hope surely performance will be less when compared to
    Spring.Forget it. This sounds like classic premature performance worries. The question cannot be answered, because there is no definitive "Spring is quicker than Weblogic" to be said. It depends wholly on your own app. Do some testing. But in all honesty, in an enterprise app, with HTTP traffic going all over the place, and browsers drawing things, users sitting around playing with buttons, databases being accessed and all other manner of things, a few extra method calls inside a container is small potatoes in comparison. Guessing at the performance isn't what you should be looking at. Getting a working application written is.
    Not to mention, of course, that those extra method calls may well be optimized away by the JVM anyway. Spring isn't stingy with it's indirection, either

  • Performance between SQL Statement and Dynamic SQL

    Select emp_id
    into id_val
    from emp
    where emp_id = 100
    EXECUTE IMMEDIATE
    'Select '|| t_emp_id ||
    'from emp '
    'where emp_id = 100'
    into id_valWill there be more impact in performance while using Dynamic SQL?

    CP wrote:
    Will there be more impact in performance while using Dynamic SQL?All SQLs are parsed and executed as SQL cursors.
    The 2 SQLs (dynamic and static) results in the exact same SQL cursor. So both methods will use an identical cursor. There are therefore no performance differences ito of how fast that SQL cursor will be.
    If an identical SQL cursor is not found (a soft parse), the SQL engine needs to compile the SQL source code supplied, into a SQL cursor (a hard parse).
    Hard parsing burns a lot of CPU cycles. Soft parsing burns less CPU cycles and is therefore better. However, no parsing at all is the best.
    To explain: if the code creates a cursor (e.g. INSERT INTO tab VALUES( :1, :2, :3 ) for inserting data), it can do it as follows:
    while More Data Found loop
      parse INSERT cursor
      bind variables to INSERT cursor
      execute INSERT cursor
      close INSERT cursor
    end loopIf that INSERT cursor does not yet exists, it will be hard parsed and a cursor created. Each subsequent loop iteration will result in a soft parse.
    However, the code will be far more optimal as follows:
    parse INSERT cursor
    while More Data Found loop
      bind variables to INSERT cursor
      execute INSERT cursor
    end loop
    close INSERT cursorWith this approach the cursor is parsed (hard or soft), once only. The cursor handle is then used again and again. And when the application is done inserting data, the cursor handle is released.
    With dynamic SQL in PL/SQL, you cannot really follow the optimal approach - unless you use DBMS_SQL (a complex cursor interface). With static SQL, the PL/SQL's optimiser can kick in and it can optimise its access to the cursors your code create and minimise parsing all together.
    This is however not the only consideration when using dynamic SQL. Dynamic SQL makes coding a lot more complex. The SQL code can now only be checked at execution time and not at development time. There is the issue of creating shareable SQL cursors using bind variables. There is the risk of SQL injection. Etc.
    So dynamic SQL is seldom a good idea. And IMO, the vast majority of people that post problems here relating to dynamic SQL, are using dynamic SQL unnecessary. For no justified and logical reasons. Creating unstable code, insecure code and non-performing code.

  • Different performance between flash player and Adobe Air on MAC

    Hi all,
    I develop a html-based AIR application that embeds a SWF. The SWF runs very slow and choppy. The same SWF loaded directly in flash player runs ok.
    This happens only on MAC. (all Adobe AIR SDK versions do the same)
    Do you have any clue?
    Thank you
    Bye

    Hi,
    Could you provide the following infomation?
    1. What's the version of your Mac?
    3. Do you mind sending your AIR app to zjian at adobe.com for investigation?
    Thanks,
    Jian
    AIR Engineering

  • Difference in WS performance between Search and Retrieve operations?

    All,
    We are currently working on a new repository and planning to use MDM webservices on top of that repository for searching and retrieving the data.
    Now I'm curious about the difference in performance between the Search and the Retrieve operations and also within the Retrieve operation, between the different identification methods (internal ID, auto ID, remote key, unique field and display field).
    Because in the webservices guide is stated that the identification methods are listed in order of best performance, but what are these performance differences between these methods (e.g. a retrieve on internal ID is x times faster than a retrieve on remote key which on his turn is x times faster than a retrieve on display fields which on his turn is x times faster than a search operation on same display field).
    Of course the performance depends on lot of other things as well, but I just want to get a feeling on the performance related to eachother (keeping all other variables that can influence the performance the same!)!
    I hope that any of you has experiences with all possibilities and can share performance measurements between the different operations related to eachother.  Thanks in advance.
    Regards,
    Marcel Herber

    Hi,
    Did you implment Webservices in your site.
    We are also having a similar scenarion where we have to serach a Records in MDM from SAP PI based on the certain criteria. I am concerned about the SAP MDM performance , since we are having heavy amount data being loaded every 30 minutes.
    Please let me know the performace aspects of using Webservices.
    Thanks
    Ganesh Kotti

  • How to compare data between two tables?

    Hi,
    My team is trying to develop a SAP data migration tool (DMT) using ABAP.
    One of the functionalities in the DMT is to validate the data in the staging area against the loaded SAP data.
    The tables in the stagin area are customer tables (i.e. user-defined tables starting with Y, Z).
    How do I compare the data in the staging area against data that are loaded into SAP tables? Are there some built-in SAP functions to do this? Or, are there some better ways of doing this (e.g. instead of comparing against data in the SAP tables, we compare with some INTERNAL tables)?
    Any help would be greatly appreciated, thanks!

    Hi Kian,
    Use <b>SCMP</b> transaction to compare data between two tables and you can not use this for comparing internal tables.
    Thanks,
    Vinay

  • How to compare date between 2 file?

    hi there...
    is there any possibility to compare date between 2 file and the file that is latest to open?
    thank you

    i need help urgently..... i type tis code
    <%
    String file = ("C:/");
    File f = new File(file);
    String [] fileNames = f.list();
    File [] fileObjects= f.listFiles();
    %>
    <UL>
    <%
    for (int i = 0; i < fileObjects.length; i++) {
    if(fileObjects.lastModified()){
    %>
    <LI>
    <a href="<%= fileNames[i %">"><%= fileNames[i] %></A>
    <%
    %>
    my purpose is to list out all the file in the folder but not to the user just for the system to check all the files than when i click a link it will open the latest file
    Message was edited by:
    n_dilah</a>

  • SG500 Slow Performance Between Vlans

    Hello,
    I am having an issue with slow performance between vlan 1 and vlan 10, I have IPv4 routing enabled and I have SVI on vlan 1 and vlan 10 respectfully. Within the same vlan the speed is great. Would it also be a problem with using vlan 1 in production for something like this? Normally I stay away from Vlan 1. 
    Thanks

    Hi Alexandery,
    In my opinion, this thread is related to ASP.NET forum. So please post thread on that forum for more effective response. Thank you for understanding. Please refer to the following link.
    http://forums.asp.net/.
    Regards,
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place. &lt;br/&gt; Click
    &lt;a href=&quot;http://support.microsoft.com/common/survey.aspx?showpage=1&amp;scid=sw%3Ben%3B3559&amp;theme=tech&quot;&gt; HERE&lt;/a&gt; to participate the survey.

  • Is it possible to perform network data encryption between Oracle 11g databases without the advance security option?

    Is it possible to perform network data encryption between Oracle 11g databases without the advance security option?
    We are not licensed for the Oracle Advanced Security Option and I have been tasked to use Oracle Network Data Encryption in order to encryption network traffic between Oracle instances that reside on remote servers. From what I have read and my prior understanding this is not possible without ASO. Can someone confirm or disprove my research, thanks.

    Hi, Srini Chavali-Oracle
    As for http://www.oracle.com/technetwork/database/options/advanced-security/advanced-security-ds-12c-1898873.pdf?ssSourceSiteId… ASO is mentioned as TDE and Redacting Sensitive Data to Display. Network encryption is excluded.
    As for Network Encryption - Oracle FAQ (of course this is not Oracle official) "Since June 2013, Net Encryption is now licensed with Oracle Enterprise Edition and doesn't require Oracle Advanced Security Option." Could you clarify this? Thanks.

  • Move encrypted filesystem between OS X and linux?

    I would like, if possible, to copy and use an encrypted filesystem between OS X and linux. I haven't found a way to do this, and would appreciate any assistance (that is, I want to create something like an encrypted sparseimage that can also be copied to, and read and mounted on, a linux system). If I build an ext2 filesystem in a sparseimage, is there any way I can get linux to understand and mount it (presumably this requires linux somehow recognising the sparseimage as a partition)? Or alternatively, is there any way to mount an encrypted linux filesystem on OS X? Cross-mounting isn't a solution to my problem; I really need to be able to put a secure filesystem in a file on a USB drive or CD or..., and then read it on a mac or linux system when I plug it in. Even the simple answer "no, it can't be done" would be a great help in saving my time... I'd like to avoid solutions that involve creating a clear copy of the encrypted system in file space (e.g. tar/gzip/encrypt/delete -> copy encrypted decrypt/gunzip/untar) if at all possible. Mechanisms that decrypt on access are much preferable.
    Thanks and Best Wishes
    Bob

    I believe TrueCrypt can do what you want.

  • Component that implements encryption solution between the browser and Java

    I need a Component that implements encryption solution between the browser and Java tier.
    I am a java programmer and have really limited knowledge about cryptography. I work on JSF . I am basically looking to build a component that will ensure that the password entered by the user in the login page of the browser is properly encrypted using Java script and then we should be able to decrypt it in the Java Tier.
    Basically, I think we need a public-private key system. We send the public key to the browser and use it with JavaScript to encrypt the key and we hold the private key on the server to decrypt it.
    If some one can help me with this it would be very helpful. Or if anyone can point me to some resource that does this kind of thing I shall be obliged.

    Can't use HTTPs as many of our existing customers
    that run on intranet do not use HTTPs.Is there really a technical reason that your clients cannot use HTTPS? If so, what is it and why would your homebrew re-implementation of the same technology be acceptable instead?

  • How to create and TDE encrypt a sql instance and db?

    I'm looking for a step by step how to. Sorry if this is an overly broad question.
    Creating a new instance shouldn't be much of a problem. Run the sql install, create a new instance with a new name.
    I'm no dba, have zero experience with encryption, so... is TDE applied after the instance is created? Would I backup/restore a db to the new instance before or after applying TDE? Is TDE "applied", and how?
    HALP
    Thanks,
    Scott

    ... is TDE applied after the instance is created?
    Hello Scott,
    We define TDE = Transparent Data Encryption on database Level, not on instance Level. And you need the Enterprise Edition to use TDE.
    Olaf Helper
    [ Blog] [ Xing] [ MVP]

Maybe you are looking for