I use ZFS send and receive to send incremental snapshots of an encrypted dataset in raw mode over SSH to a backup server using mbuffer over the internet.
Using this strategy the transferspeed increases greatly. Only using a 10 year old Core 2 Duo, I hit a transferspeed of 750Mbit on my test bench, because the data isn’t decrypted, encrypted and compressed again.
Using mbuffer however, you send data over a raw TCP stream, no encryption is used. This is okay for a trusted network, but normally not for a public network.
But I send raw encrypted data and all commands to establish the data transfer are still encrypted using SSH.
Is it safe to use mbuffer to send data over a public network when sending raw encrypted data?
Go to Source
Author: Hans Oostendorp