I found below document which explains a little about performance impact when vSAN encryption is enabled.
-> There is minimal impact to CPU cycles while we encrypt data. This is fundamental to how encryption has been designed for vSAN. For most workloads (with AES-NI enabled) we expect somewhere between 5-15% CPU penalty and no performance overhead. This overhead is representative of running vSAN with dedupe and compression turned on.
However, I am a little confused that what does 5-15% CPU penalty mean? Means CPU speed will become slower at 5-15%?
And what does “This overhead is representative of running vSAN with dedupe and compression turned on” mean? When the dedupe and compression is enabled, there is no performance overhead ?
It will be appreciated if anyone could explain more detail.