Uploaded November 2025 | Updated September 2026, 2 weeks ago
Securing Data in Motion and at Rest: Quantifying End-to-End Encryption Performance in Ceph- Vikhyat Umrao & Daniel Parkes, IBM
Encryption is essential for securing data in modern storage systems — but it comes at a cost. This session will walk through real-world benchmarking results that quantify the performance and resource overhead of implementing end-to-end encryption in Ceph RGW. We'll cover encryption at rest using SSE-S3 with external key management, encryption in transit via TLS, and secure daemon communication with msgr2+secure.
Drawing from extensive testing on all-NVMe clusters with 100 GbE networking, we’ll break down how each security layer impacts throughput, latency, and CPU/memory consumption across small and large object workloads. Attendees will leave with a practical understanding of how to balance security with performance in production object storage environments.
Takeaways:
- Learn how to configure and validate end-to-end encryption (SSE-S3, TLS, msgr2 secure) in Ceph RGW.
- Understand the performance tradeoffs and resource impact of each encryption layer.
- See benchmarking data and tuning tips to help guide real-world deployment decisions.
Securing Data in Motion and at Rest: Quantifying End-to-End Encryption Performance in Ceph- Vikhyat Umrao & Daniel Parkes, IBM
Encryption is essential for securing data in modern storage systems — but it comes at a cost. This session will walk through real-world benchmarking results that quantify the performance and resource overhead of implementing end-to-end encryption in Ceph RGW. We'll cover encryption at rest using SSE-S3 with external key management, encryption in transit via TLS, and secure daemon communication with msgr2+secure.
Drawing from extensive testing on all-NVMe clusters with 100 GbE networking, we’ll break down how each security layer impacts throughput, latency, and CPU/memory consumption across small and large object workloads. Attendees will leave with a practical understanding of how to balance security with performance in production object storage environments.
Takeaways:
- Learn how to configure and validate end-to-end encryption (SSE-S3, TLS, msgr2 secure) in Ceph RGW.
- Understand the performance tradeoffs and resource impact of each encryption layer.
- See benchmarking data and tuning tips to help guide real-world deployment decisions.
