Notes from building object storage into a service.
We write about the awkward bit between "Ceph RGW is running" and "customers can rely on this as a product": access, operations, security, billing, troubleshooting and provider architecture.
The decisions behind ScaleStore.
These are the product and architecture trade-offs we keep running into while building around provider-owned Ceph.
Object Storage Is Not the Same as an Object Storage Product
An S3 endpoint can be technically excellent and still be a poor service. The difference shows up in everything customers and operators need around it.
Why ScaleStore Uses a Provider Bridge
We wanted central coordination without putting customer object traffic or broad administrative access through ScaleStore Cloud.
STS, Quotas, Usage and Billing Belong Together
Credentials, limits and usage records look like separate features until you try to operate and bill a real storage service.
What “Why Did This S3 Request Fail?” Really Requires
The hard part is not collecting more logs. It is giving support enough context to explain a failure without handing them secrets or a distributed-systems scavenger hunt.
Ceph RGW in the real world.
Longer technical guides for the parts that are easy to misconfigure or misunderstand. Always check the documentation for the Ceph release you actually run.
Putting Ceph RGW on the Internet: An Operator’s Checklist
A practical pre-flight review for TLS, edge controls, credentials, tenant boundaries, quotas, logging, recovery and safe defaults.
How to Secure Ceph RGW Buckets Without Relying on Luck
Bucket security is a stack of controls: endpoint hardening, identity, policy, encryption, versioning, logging and tested recovery.
Ceph RGW Bucket Policies, Without the IAM Fog
A practical mental model for principals, actions, resources and conditions—and the RGW-specific differences that matter.
Ceph RGW Replication: Three Different Things People Call Replication
Pool durability, RGW multisite and S3-style bucket replication solve different problems. Mixing them up leads to bad designs.