Updated on 2024-10-17 GMT+08:00

Overview

This document summarizes practices in common application scenarios of Object Storage Service (OBS). Each practice case is given detailed solution description and operation guidance, helping you easily build your storage services based on OBS.

Table 1 OBS best practices

Best Practice

Description

Suggestions on OBS Security Configuration

Provides actionable guidance for enhancing the overall security of using OBS.

Enterprise Data Access Control

Describes how to configure access to enterprise data. After subscribing to OBS, enterprises can configure the following four types of access control to control access to their data:

  • Grant only required permissions to employees in different departments to isolate access to the enterprise data.
  • Grant permissions to users of a department or project to download the shared data but not to write or delete the shared data.
  • Allocate IAM users with different roles to each department and use bucket policies to authorize the IAM users independent permissions on resources.
  • Add external buckets on OBS Browser+ to isolate bucket resources between departments.

Migrating Local Data to OBS

Describes how to migrate local data from personal computers or on-premises storage servers to OBS.

Migrating Data from a Third-Party Vendor to OBS

Describes several migration methods for migrating data from third-party vendors to OBS.

Migrating Data Between OBS Buckets

Describes how to migrate data between Huawei Cloud OBS buckets that are under different accounts or deployed in the same or different regions.

Using Backup Software to Back Up Local Data to OBS

Describes why you should back up local data to OBS and what backup software you can use, and uses Commvault as an example to describe how to back up local data to OBS.

Accessing OBS from an ECS over the Intranet

Describes how to access OBS from your Elastic Cloud Server (ECS) over the internet or the Huawei Cloud intranet (recommended for better performance and lower costs).

Using a User-Defined Domain Name to Host a Static Website

Describes how to use a user-defined domain name to host static websites on OBS, for you to quickly launch personal and enterprise static websites without setting up website servers.

Verifying Data Consistency

Describes how to verify data consistency during data upload and download using the MD5 check, because data may become inconsistent due to network hijacking, caching, and other reasons during upload and download.

Optimizing the Performance

Describes how to add random prefixes to object names to implement horizontal expansion for high-speed requests, and thus improve the access rate and shorten the access latency.

Using the PostObject API to Upload Data from a Web Client to OBS

Describes how to use the PostObject API to directly upload files from a web client to OBS, that is, to upload files to OBS through a browser. With this method, you can directly upload data to OBS, without having to upload data to the app server first. This makes the transmission faster and does not impose pressure on the server. Additionally, it is more secure to adopt direct transmission with a signature returned by the server.

Uploading Data from Mobile Apps to OBS

Describes two methods for app clients to access OBS, to better protect data and prevent data leakage and unauthorized access.

Uploading Data from Mini Programs to OBS

Demonstrates how to upload files to OBS using a mini program.

Accessing OBS Through an NGINX Reverse Proxy

Describes how to configure the NGINX reverse proxy on an ECS, so that you can use a fixed IP address to access OBS.