1. Overview
This document provides an overview of new features in the Fortanix Data Security Manager (DSM) Accelerator 4.33 release.
2. New Features
DSM Accelerator Webservice:
Added support for setting up Fortanix DSM Accelerator Webservice on Nitro using Fortanix CCM. This feature simplifies and accelerates the deployment of Fortanix DSM Accelerator Webservice in Nitro environments (JIRA: PM-389).
Added support to configure quorum policy approval for Fortanix DSM Accelerator Webservice on Nitro (JIRA: PROD-9105).
Added support to retrieve the server-side Transport Layer Security (TLS) key and certificate for Fortanix DSM Accelerator Webservice on Nitro, directly from Fortanix DSM (JIRA: PM-390).
For more details, refer to DSM - Accelerator Webservice for Nitro with CCM Setup Guide.
Introduced Bearer Token authentication support for Fortanix DSM Accelerator Webservice Rust Webservice API requests (JIRA: PM-391).
3. Fortanix Data Security Manager Accelerator Performance Statistics
3.1 Runtime Environment
NOTE
The following table lists the standard recommended runtime environment. You can choose a higher configuration for better performance.
DSM Accelerator was run in the runtime environment listed below for performance testing.
Item | Specification |
|---|---|
Number of Cores | 4 |
CPU | Intel(R) Xeon(R) CPU E5-2673 v4 @ 2.30GHz |
RAM | 2 GiB |
VM Type | Standard D4ds v4 Azure VM |
Docker Runtime Configuration |
|
3.2 DSM Accelerator Webservice
NOTE
The performance numbers below are captured with a single node; if you need higher performance or throughput, then we recommend adding multiple nodes.
Key Types and Operations | Throughput (Operations/second on a 1-node cluster re-using a single TLS session) |
|---|---|
AES 256: CBC Encryption/Decryption | 21,183/20,790 |
AES 256: GCM Encryption/Decryption | 21,841/21,628 |
AES 256: FPE Encryption/Decryption | 9,339/9,311 |
3.3 Additional Modes
Key Types and Operations | Throughput (Operations/second on a 1-node cluster re-using a single TLS session) |
|---|---|
AES 256: CBCNOPAD Encryption and Decryption | 21,309/21,477 |
AES 256: CFB Encryption/Decryption | 22,042/21,715 |
AES 256: CTR Encryption/Decryption | 21,847/21,688 |
AES 256: OFB Encryption/Decryption | 21,875/21,786 |
AES 256: CCM Encryption/Decryption | 21,754/21,662 |