trepctl thl
Available in 7.0.0 and later.
The trepctl thl command is used to dynamically enable or disable on-disk encryption and compression of THL.
These options can also be set via tpm options. For more information see
- "THL Encryption and Compression" for Tungsten Clustering
- "THL Encryption and Compression" for standalone Tungsten Replicator installation
trepctl thl [ options ]
Where:
| Option | Description | Version |
|---|---|---|
-compression | Enable or Disable THL Compression on disk. Service must be offline to change. | 7.0.0 |
-encryption | Enable or Disable THL Encryption on disk. Service must be offline to change. | 7.0.0 |
genkey | Pass to the -encryption option to generate new keys. | 7.0.0 |
-compression
Pass enable or disable to the -compression option to enable or disable THL compression accordingly.
Note that the replicators must be offline to change this option and the same enable|diable option must be applied to all hosts before bringing replication online:
On every host, place the services offline, and enable (or disable) compression:
shell> trepctl [-service <servicename>] offline
shell> trepctl [-service <servicename>] thl -compression [enable|disable]
When complete, bring the replicators online, starting with the Primary:
shell> trepctl [-service <servicename>] online
If you are running Tungsten Clustering you will need to set the cluster to MAINTENANCE before taking the replicators offline, and return to AUTOMATIC after making the changes
-encryption
Pass enable or disable to the -encryption option to enable or disable THL encryption accordingly.
Note that the replicators must be offline to change this option and the same enable|diable option must be applied to all hosts before bringing replication online:
On every host, place the services offline, and enable (or disable) encryption:
shell> trepctl [-service <servicename>] offline
shell> trepctl [-service <servicename>] thl -encryption [enable|disable]
When complete, bring the replicators online, starting with the Primary:
shell> trepctl [-service <servicename>] online
If you are running Tungsten Clustering you will need to set the cluster to MAINTENANCE before taking the replicators offline, and return to AUTOMATIC after making the changes
Generate a new encryption key for THL
Pass genkey to the -encryption option to generate a new encryption key. Unlike enabling/disbaling encrpytion, to change generate a new
encryption key, the replication service must be online.
shell> trepctl [-service <servicename>] online
shell> trepctl [-service <servicename>] thl -encryption genkey
The genkey option should ONLY be executed on a primary node.