Encryption Support Evaluation

Consumers looking for encryption capabilities can opt to encrypt a iSCSI share with TrueCrypt or some in-built encryption mechanism in the client OS. However, if requirements dictate that the data must be shared across multiple users / computers, relying on encryption in the NAS is the best way to move forward. Most NAS vendors use the industry-standard 256-bit AES encryption algorithm. One approach is to encrypt only a particular shared folder while the other approach is to encrypt the full volume. Synology supports only folder-level encryption for now in DSM.

On the hardware side, encryption support can be in the form of specialized hardware blocks in the SoC (common in ARM / PowerPC based NAS units). In x86-based systems, accelerated encryption support is dependent on whether the AES-NI instruction is available on the host CPU. One of the most attractive features of the Intel Rangeley platform / Silvermont cores is full hardware acceleration for all essential cryptography functions. The results, as you can see below, are consistent across all evaluated scenarios. The penalty compared to unencrypted shares is non-existent.

8-bay NAS Encryption Performance (CIFS) - Windows

The above graph shows why AES-NI is essential for users looking to encrypt shared folders / volumes in NAS units

Multi-Client iSCSI Evaluation Miscellaneous Aspects and Final Words
Comments Locked

65 Comments

View All Comments

  • LoneWolf15 - Tuesday, November 18, 2014 - link

    The thing is, no business is going to base a NAS on hardware that's "going to goodwill anyhow" unless they're run on a shoestring budget or one that doesn't comprehend data integrity. $750 is worth the time because it gives you the following with Synology:

    -Easy setup
    -Easy replication to a second Synology
    -Easy migration from a failing NAS
    -Easy reporting/monitoring for small to medium business
    -Easy administration for a business that doesn't have your level of IT knowledge

    This product isn't for you, but actually, the Synology DSM operating system *is* a proven OS; it's at version 5.1 now. The argument for purchasing one is the same as the argument for buying a server over building your own --in business, there's good reason for letting someone else do that part of the work for you, so you can concentrate on, you know, --business.
  • carage - Wednesday, November 19, 2014 - link

    It will work great until it get hits with SynoLocker again.
  • SirGCal - Wednesday, November 19, 2014 - link

    I don't know any business that would use these as secure NAS storage anyhow. Businesses have an entirely different type of storage, far faster, more secure, and actually quite larger. The last bank we bought is a simple rack configured for 24 drives in volumes of 12 that you can use any way you choose. These are for consumers, not businesses.
  • SirGCal - Wednesday, November 19, 2014 - link

    And for the record, I don't work with hardware, I write software by trade. Although my direct trade has nothing to do with helping me learn to set these up. That knowledge came from a few minutes on Google and I can follow instructions. I've also fixed a failed array, moved them to new hardware, etc. ZFS is actually one of the oldest and most secure RAID type format, originally created for Solaris/Sun systems very long ago. The nice thing about modern ZSF arrays is how easy they are to recover, unlike hardware-raid options which even putting the drives in an identical controller might not work.

    And all of your bullets are easily covered by the combination accept the last which, honestly, if your level of IT is that low in any company, you should be out-sourcing all of your storage and IT needs and not even trying to do this alone. But it would be almost questionable why any company that small would need live, fast storage like this. New cloud services are generally far more their cup-of-tea for the very small businesses. Literally buy it and forget it, use it like a drive within your company, fully encrypted, etc. and surprisingly quick considering. Even my extremely large company has a few online storage systems for the 'very cheap' departments to use instead of spending a bit more for a rack in the data center and tape backups there-after. The cloud is far cheaper if you're not talking hundreds of Tera-bytes and extreme speed access. That's from the business side of the discussion. But again, these are aimed at consumers.
  • DiHydro - Wednesday, November 19, 2014 - link

    "Businesses have an entirely different type of storage, far faster, more secure, and actually quite larger." You mean this same hardware in a rack mount? Did you even read this article? Any business employing 1-50 or so people would be the target for this NAS. Something like a hairdresser, contractor, accounting firm (hopefully with offsite backup also). You are too entrenched in your view point to see that others have different priorities and objectives. Yes, for people like you and I, setting up an 8 bay NAS with generic components is trivial, but the manager at your grocery store doesn't know, and doesn't care. They will buy something that is plug-and-play, has a warranty, and has the storage they need. Imagine if that manager hired you to set up a storage solution, would you custom build the hardware and install Ubuntu for it? No, you would quote out one of these, and a couple hours of install. Making you a nice profit, and not having the buyer have deal with you and the cobbled together solution for any little problem in hardware compatibility, or down time, or interoperability issues.
  • SirGCal - Friday, November 21, 2014 - link

    The manager at the grocery store isn't responsible for buying hardware and would have no need for said hardware. Nore would a hairdresser... And even if they did need storage, online storage would be more cost beneficial in most of those cases. But what are they going to store? The grocery store has a giant IT system tied into the parent company with their proprietary software. The Hairdresser has contact information, assuming they have their own store and not working for a chain... My parents both work at a grocery while they retire. And unfortunately, mom & pop groceries are all but gone due to the push of the horrible corporate arm. And I help my wife's hairdresser who does my hair for Locks for Love when I grew it out (a free everything when I donated). The most she ever needs is her laptop cleaned of malware. All of her contact information is safely and securely stored in the 'cloud' (god I hate that word... it's on servers on the internet... but let's tag it with a stupid word now that speeds are high enough we can push to outside storage easier...) Nice try though. Ironic on both counts, but no dice.
  • verraneventide - Tuesday, October 27, 2015 - link

    SirGCal: yes, I am resurrecting this comment chain almost a year later. I rarely post on the 'net to comments like these: so lucky you. We just deployed this NAS for my client. My client is a small retail business (20+ employees) who sell medical scrubs and equipment. They own three retail stores, run two large e-commerce sites and handle a lot of phone orders. We setup the NAS to retain local disk images of all their machines. We also use it for VM hosting and additional file sharing needs. They use me as a part time contractor because they have a very tight budget and cannot afford a full time (competent) IT resource. They would much rather purchase a device, with manufacturer support, like this, than have me spend labor hours building something out that I may not be around to support later (i.e. if I get hit by a bus). We also backup everything to the cloud as a redundant fail-safe. This *includes* everything on the NAS. Sure, I could have set up my own solution. But, as a previous commenter mentioned: finding and purchasing the necessary hardware, setting it up, testing it and deploying it would have been more time consuming, and therefore more expensive. I am calling bull**** on going through that entire process in only 30 minutes. And, again, a custom solution would have been without manufacturer support. So, "no dice".
  • awktane - Tuesday, November 18, 2014 - link

    Configure a NAS unit like this beside someone who is trying to create a HA iscsi server with plex, picture sharing website, and cloud synch replacing onedrive/dropbox/etc with little prior knowledge. Then do watch them both when something goes wrong. Time is money.
  • Gigaplex - Tuesday, November 18, 2014 - link

    If I rebuilt my home file server from scratch, it would probably take me less than an hour to get it up and running. When I did it originally, I spent days experimenting which filesystem to use, tuning cache and stripe size on the array for performance, diagnose samba configuration issues etc. As a hobby, that's fine. If I had to charge for my time, it would have been cheaper to just buy a preconfigured NAS.
  • dgingeri - Tuesday, November 18, 2014 - link

    If their time is worth that much, they should hire a real IT guy to do it right.

Log in

Don't have an account? Sign up now