What is a DS3 Gateway?
A DS3 Gateway is the access point to the DS3 storage system. It exposes an S3-compatible API to external applications and services, enabling seamless integration with standard tools like:
- AWS CLI
rclone
- Backup software with S3 support
DS3 Gateways act as the bridge between your apps and the DS3 geo-distributed backend, offering secure, efficient, and scalable access to object storage.
Each Cubbit Tenant automatically gets a dedicated public DS3 Gateway, typically available at: s3.<tenant-name>.cubbit.eu
. You can also deploy private gateways in your own infrastructure for full control over data locality and compliance.
Core Components
A DS3 Gateway includes the following components:
-
S3 Server Exposes the S3-compatible API, handles request authentication, performs client-side encryption, and manages secure interaction with the storage backend.
-
Offloader Processes Handle the core DS3 logic:
- Fragment and encrypt objects
- Apply redundancy policies (e.g., erasure coding)
- Transfer fragments to and from Swarm nodes
-
Optional Cache Accelerates frequent reads and write bursts. When deployed on shared storage, the cache improves performance across multiple gateway instances.
Deployment Options
DS3 Gateways are infrastructure-agnostic and can run on:
- Physical servers (on-prem or edge)
- Virtual machines (e.g., VMware, KVM, Proxmox)
- Cloud instances (e.g., AWS EC2, Azure VMs)
You can deploy gateways across sites to optimize access latency and locality.
Public vs. Private Gateways
Choose the deployment model that fits your needs:
✅ Public DS3 Gateway
- Automatically created per Tenant
- Managed by Cubbit
- Ideal for quick and maintenance-free integrations
- Available at
s3.<tenant-name>.cubbit.eu
- Please note: Although egress bandwidth from each Cubbit Public DS3 Gateway is currently free of charge, this policy may change in the near future.
🔐 Private DS3 Gateway
- Fully self-hosted in your infrastructure
- Complete control over data locality and networking
- Ideal for sovereign, edge, or air-gapped environments
- Direct control over usage cost
- Custom domain
To deploy your own gateway, follow the Private DS3 Gateway Installation Guide.
Summary
DS3 Gateways simplify integration with Cubbit’s geo-distributed storage while preserving performance, security, and flexibility.
They are:
- S3-compatible
- Secure by design
- Deployable anywhere
Whether using the managed public gateway or deploying your own, you can tailor DS3 to your infrastructure and compliance needs.
Need help designing your deployment? Contact our support or solution engineering team.