Skip to content
Provider Bridge

The provider-side control edge.

The Provider Bridge keeps provider ownership intact. It handles approved control actions and provider-side integration while customer object traffic continues to flow directly to provider RGW.

Outbound model

Provider-controlled connectivity

The bridge initiates outbound connectivity. ScaleStore does not need broad inbound administrative exposure into provider infrastructure.

Control path only

Approved actions, not object bytes

The bridge is part of the control plane. It applies approved operations and reports health. It is not the customer object-data path.

Per provider

One bridge per provider

Each provider runs its own bridge against its own infrastructure, domains, and RGW environment. There is no shared cross-provider bridge.

Boundary

Why the bridge exists

The bridge lets ScaleStore coordinate provider workflows without taking over the provider's storage path or requiring ScaleStore Cloud to become the direct operator of provider infrastructure.

ScaleStore Cloud

Authorizes and coordinates

Defines provider state, product configuration, approved actions, and support workflows.

Provider Bridge

Executes provider-side control tasks

Receives approved operations, integrates with provider-side systems, and reports health and diagnostics.

Provider Ceph RGW

Remains the storage endpoint

Customers keep talking to provider-owned S3 endpoints. Their object traffic does not get proxied through ScaleStore Cloud.

1Provider deploys bridge
2Bridge enrolls outbound
3ScaleStore authorizes actions
4Bridge applies operations

What the bridge is

The Provider Bridge is a controlled provider-side component. It sits between ScaleStore Cloud and provider-owned systems so the platform can coordinate provider workflows without centralizing storage traffic.

In practical terms, the bridge is the architectural answer to a simple requirement: providers should stay providers.

What the bridge connects

  • ScaleStore Cloud as the coordinating control plane.
  • Provider-owned Ceph RGW as the object-storage backend.
  • Provider-side operational systems where lifecycle or support workflows require integration.

What the bridge does

  • enrolls and identifies the provider-side environment
  • executes approved provider-side operations
  • reports health and heartbeat state
  • returns diagnostics and support-relevant information
  • helps maintain the control boundary between ScaleStore Cloud and provider infrastructure

What the bridge does not do

  • It does not proxy customer object traffic.
  • It does not replace provider RGW endpoints.
  • It does not create a shared multi-provider execution surface.
  • It does not turn ScaleStore into the storage operator of record.

Security and control model

The Bridge executes a defined set of provider-side actions. It is scoped to one provider, connects outbound, records what it does and does not become a general administrative tunnel into the environment.