During the backup and recovery process, in order to ensure data security, XBSA App and NetBackup client will enable data transmission encryption by default. After data transmission encryption is enabled, the backup data will be encrypted before transmission. It is recommended to enable it when the NetBackup client is in an untrusted network environment and the backup data security is threatened.

In the case of a secure and reliable network environment, in order to achieve the best backup and recovery performance, it is recommended to change the data transmission mode of XBSA App from nbdssl to nbd, and turn off NetBackup's data transmission encryption (DTE). Turning off data transmission encryption for a single test can slightly increase the backup and recovery rate, but it cannot achieve the best backup and recovery performance.

The method to change the XBSA App transmission mode is as follows:

1. Modify the TransportMode in /etc/sf-vmbackup-app/sf-vmbackup-api.yaml to nbd;
2. Restart the service: sudo systemctl restart sf-vmbackup-api.service.

The method to turn off NetBackup encryption in transit is as follows:

1. Confirm that the global encryption in transit is "preferably off". The operation method is to log in to the NetBackup Web UI, click the "Settings" icon in the upper right corner of the page, enter Global security settings > Secure Communication, and set it in the "Data-in-transit encryption"

2. Modify the NetBackup client /usr/openv/netbackup/bp.conf, set

DTE_CLIENT_MODE = OFF, can turn off the encryption in transit of the NetBackup client.