Use of Encryption
Do not enable encryption on backups in Commvault. This prevents the Data Domain from further deduplicating the data written on the device side. If you need to use encryption of the data at rest, enable this feature on the Data Domain.
To encrypt data between the Commvault servers and the Data Domain devices, enable the Encryption of data in flight through DD Boost option in the Data Domain console. For the best performance with the Encryption of data in flight through DD Boost option, select anonymous authentication mode.
Compression is optional and should be used if there will be secondary copies of data to any storage other than a Data Domain. Compression may also offer benefits if many clients are backing up over the network through MediaAgents as this will reduce the amount of data transmitted over the wire and may lead to overall faster backup and restores.
In cases where most of the clients will be using the client-direct model and all copies will be written to Data Domain storage, you can turn off compression in Commvault and let the Data Domain software handle this to optimize data reduction rates.
Storage Acceleration (Client-Direct Mode)
Storage Acceleration (also known as Client-Direct mode) can be set up on clients to directly send the backup data to a configured Data Domain Boost Client storage library. Without Storage Acceleration, clients send the backup data to the MediaAgent first, and then the MediaAgent writes the data into the Data Domain Boost Client storage library. If the clients have the ability to send data directly to the Data Domain storage device, you can configure them to use Storage Acceleration.