Planning for CTE-LDT Attribute Storage
Before a GuardPoint is enabled for CTE-LDT, make sure that there is sufficient free disk space in the file system to which the GuardPoint belongs. Free space is required for CTE-LDT attributes and (in Linux) metadata in the MDS file. CTE-LDT attributes are created during the initial encryption and are never freed until the GuardPoint is permanently unguarded and removed from the protection of an CTE-LDT policy. In contrast, disk space for metadata in the MDS file is temporary, kept only during the live transformation process.
When planning how much free disk space to reserve for CTE-LDT on a GuardPoint, consider the following:
-
Number of files in the GuardPoint
-
(Linux) Average length of absolute pathnames of files in the GuardPoint
The CTE-LDT process pre-allocates disk space for the Linux MDS file based on a minimum of 200K files with an average pathname of 1024 bytes per GuardPoint. The minimum space amounts to 325MB of disk space for the MDS file for each GuardPoint, even if file count is very low. (In Windows, CTE-LDT reserves the space when the file is rekeyed.)
