The trepctl thl command is used to dynamically enable or disable on-disk encryption and compression of THL.
These options can also be set via tpm options. For more information see Section 6.18.4, “THL Encryption and Compression”
trepctl thl [ -compression
] [ -encryption
]
Pass enable
or disable
to the -compression
option to enable or disable THL compression accordingly.
Note that the replicators must be offline to change this option and the same enable|diable option must be applied to all hosts before bringing replication online:
First, place the cluster into MAINTENANCE
:
shell>cctrl
cctrl>set poicy maintenance
On every host, place the services offline, and enable (or disable) compression:
shell>trepctl [-service <servicename>] offline
shell>trepctl [-service <servicename>] thl -compression [enable|disable]
When complete, return the cluster to AUTOMATIC
which will return the replicators to online:
shell>cctrl
cctrl>set policy automatic
Pass enable
or disable
to the -encryption
option to enable or disable THL encryption accordingly.
Note that the replicators must be offline to change this option and the same enable|diable option must be applied to all hosts before bringing replication online:
First, place the cluster into MAINTENANCE
:
shell>cctrl
cctrl>set poicy maintenance
On every host, place the services offline, and enable (or disable) encryption:
shell>trepctl [-service <servicename>] offline
shell>trepctl [-service <servicename>] thl -encryption [enable|disable]
When complete, return the cluster to AUTOMATIC
which will return the replicators to online:
shell>cctrl
cctrl>set poicy automatic
Pass genkey
to the -encryption
option to
generate a new encryption key. Unlike enabling/disbaling encrpytion, to change generate a new
encryption key, the replication service must be online.
shell>trepctl [-service <servicename>] online
shell>trepctl [-service <servicename>] thl -encryption genkey
The genkey
should ONLY be executed
on the primary node.