Replication of an encrypted volume

An apparatus comprising:

• a processor;
• and
• a non-transitory storage medium storing instructions executable on the processor to:
• set up a replication partnership between a first storage node and a second storage node, wherein the instructions to set up the replication partnership comprise instructions executable on the processor to:
• establish a secure connection between the first storage node and the second storage node using a remote internet protocol address, a base port number, and an identifying key pair;
• create a port forwarding configuration for communications over the secure connection using a set of pre-established port offsets, wherein the creating of the port forwarding configuration comprises:
• adding each respective pre-established port offset of the set of pre-established port offsets to the base port number to derive a respective port number of a plurality of port numbers, wherein the plurality of port numbers correspond to a plurality of communication links that are part of the port forwarding configuration, and the plurality of communication links are between the first storage node and the second storage node;
• and
• exchange encryption keys between the first storage node and the second storage node using at least one communication link corresponding to at least one pre-established port offset of the set of pre-established port offsets.

A non-transitory storage medium storing instructions that, when executed by a machine, cause the machine to:

• set up a replication partnership between a first storage node and a second storage node, wherein the instructions to set up the replication partnership comprise instructions to:
• establish a secure connection between the first storage node and the second storage node using a remote internet protocol address, a base port number, and an identifying key pair;
• create a port forwarding configuration using a set of pre-established port offsets, wherein the creating of the port forwarding configuration comprises:
• adding each respective pre-established port offset of the set of pre-established port offsets to the base port number to derive a respective port number of a plurality of port numbers, wherein the plurality of port numbers correspond to a plurality of communication links that are part of the port forwarding configuration, and the plurality of communication links over are between the first storage node and the second storage node;
• and
• exchange encryption keys between the first storage node and the second storage node using the port forwarding configuration.