OGG security Features--Network transmission encryption

Third, network transmission encryption

Goldengate when transferring data, the default is unencrypted. Data can be encrypted before the goldengate is transmitted over the network and transmitted to the target side to decrypt the data before it is written to the trail file. This effectively protects the data during transmission.

The steps for encrypting network transmission are as follows.

Generate multiple keys on the production side and then save them to the Enckeys file, which describes the creation of the Enckeys file, which we use directly.

Example 16:

[Oracle@oe5 orcl1]$ Cat Enckeys

# # encryption keys

# # Key Name

Superkey 0xa3116324f0c72b3be328e728c6e75725

Superkey1 0x907b7678a7ab561caf2532539a1de72a

Superkey2 0x7ee5894c5d8f817d7b227d7d6e537630

Superkey3 0x6c4f9d201473ac5e481fc82742890536

Copy this file to the disaster-tolerant side of the GG installation directory.

Disaster-tolerant end of the Enckeys file content must be the same as the production side, or GG will be the error:

Example 17:

2011-03-22 21:18:59 Error OGG-01224 TCP/IP error (Connection reset by peer) retries exceeded.

2011-03-22 21:18:59 ERROR OGG-01668 PROCESS abending.

Use the Rmthost parameter of the Encrypt option to specify the type of encryption and the key that is listed in the Enckeys file to use:

More Wonderful content: http://www.bianceng.cnhttp://www.bianceng.cn/database/extra/

Example 18:

ENCRYPT BLOWFISH, KeyName <keyname>

Among them, Blowfish is the algorithm to be used, this algorithm encryption of the performance loss is relatively small.

<keyname> is the keyname listed in the Enckeys file.

Example 19:

Ggsci (OE5) 44> view params Dpema

EXTRACT Dpema

Rmthost 192.168.50.200, Mgrport 7849, ENCRYPT BLOWFISH, KeyName Superkey

--rmthost 192.168.50.200, Mgrport 7849, compress

PassThru

Numfiles 50000

Rmttrail./dirdat/ma

Dynamicresolution

Table scott.*;

View disaster-tolerant end MGR process, you can see "Encrypt Blowfish-keyname Superkey", indicating that GG has been implemented encryption processing.

Example 20:

2011-03-22 21:12:03 INFO OGG-00963 Command received from EXTRACT on host 192.168.50.200 (START SERVER CPU-1 PRI-1 TIMEOUT params-encrypt blowfish-keyname superkey).