Secured transfer of data between datacenters

A method, comprising:

• monitoring one or more performance metrics of a first encryption unit executing at a first datacenter;
• transferring data from a first host program executing at the first datacenter to a second host program executing at a second datacenter, including by:
• receiving, by the first host program, information indicative of the one or more performance metrics of the first encryption unit;
• selecting, by the first host program, the first encryption unit, from a plurality of encryption units, to encrypt data from the first host program, wherein the first encryption unit is selected based on the information indicative of the one or more performance metrics;
• encrypting, by the first encryption unit, data from the first host program to generate encrypted data;
• and
• sending the encrypted data from the first encryption unit to a corresponding encryption unit executing at the second datacenter.

A non-transitory, computer-readable medium having computer instructions stored thereon that are capable of being executed by one or more computer systems to cause operations comprising:

• monitoring one or more performance metrics of a first encryption unit executing at a first datacenter;
• transferring data from a first host program executing at the first datacenter to a second host program executing at a second datacenter, including by:
• receiving, by the first host program, information indicative of the one or more performance metrics of the first encryption unit;
• selecting, by the first host program, the first encryption unit, from a plurality of encryption units, to encrypt data from the first host program, wherein the first encryption unit is selected based on the information indicative of the one or more performance metrics;
• encrypting, by the first encryption unit, data from the first host program to generate encrypted data;
• and
• sending the encrypted data from the first encryption unit to a corresponding encryption unit executing at the second datacenter.

A system, comprising:

• a datacenter facility that includes:
• a plurality of computer systems;
• a plurality of storage subsystems that are configured to store data for a plurality of entities;
• and
• a network interface configured to communicate with a different datacenter facility;
• wherein at least one of the plurality of computer systems includes a non-transitory, computer-readable medium having program instructions stored thereon that are capable of being executed by one or more of the plurality of computer systems to perform operations, comprising:
• monitoring one or more performance metrics of a first encryption unit executing at the datacenter facility;
• transferring data from a first host program executing at the datacenter facility to a second host program executing at the different datacenter facility, including by:
• receiving, by the first host program, information indicative of the one or more performance metrics of the first encryption unit;
• selecting, by the first host program, the first encryption unit, from a plurality of encryption units, to encrypt data from the first host program, wherein the first encryption unit is selected based on the information indicative of the one or more performance metrics;
• encrypting, by the first encryption unit, data from the first host program to generate encrypted data;
• and
• sending the encrypted data from the first encryption unit to a corresponding encryption unit executing at the different datacenter facility.