Updated on 2026-08-14 GMT+08:00

Overview

This document summarizes practices in common application scenarios of Object Storage Service (OBS). Each practice case is given detailed solution description and operation guidance, helping you easily build your storage services based on OBS.

Table 1 OBS best practices

Best Practice

Description

Using the PostObject API to Upload Data from a Web Client to OBS

Describes how to use the PostObject API to directly upload files from a web client to OBS, that is, to upload files to OBS through a browser. With this method, you can directly upload data to OBS, without having to upload data to the app server first. This makes the transmission faster and does not impose pressure on the server. Additionally, it is more secure to adopt direct transmission with a signature returned by the server.

Uploading Data from a Web Client to OBS and Setting an Upload Callback

Describes how to use the PostObject API to upload files directly from a web client to OBS and configure an upload callback. This method is called form-based upload. After the upload succeeds, OBS sends a callback to the specified address. Because the files are uploaded directly from the web client to OBS without passing through your server, transfers are faster and server load is reduced. In addition, using a server-generated signature enhances the security of the direct upload.

Uploading Data from Mobile Apps to OBS

Describes two methods for app clients to access OBS, to better protect data and prevent data leakage and unauthorized access.

Uploading Data from Mini Programs to OBS

Demonstrates how to upload files to OBS using a mini program.

Migrating Local Data to OBS

Describes how to migrate local data from personal computers or on-premises storage servers to OBS.

Using Backup Software to Back Up Local Data to OBS

Describes why you should back up local data to OBS and what backup software you can use, and uses Commvault as an example to describe how to back up local data to OBS.

Migrating Data from a Third-Party Vendor to OBS

Describes several migration methods for migrating data from third-party vendors to OBS.

Migrating Data Between OBS Buckets

Describes how to migrate data between Huawei Cloud OBS buckets that are under different accounts or deployed in the same or different regions.

Accessing OBS from an ECS over the Intranet

Describes how to access OBS from your Elastic Cloud Server (ECS) over the internet or the Huawei Cloud intranet (recommended for better performance and lower costs).

Accessing OBS Through an NGINX Reverse Proxy

Describes how to configure the NGINX reverse proxy on an ECS, so that you can use a fixed IP address to access OBS.

Using Cloud Connect to Access OBS Across Regions over an Intranet

Describes how to use Cloud Connect to access OBS buckets across regions. This solution uses each bucket's Direct Connect domain name and IP address. To access a bucket, simply use its Direct Connect domain name. Cloud Connect then automatically routes your request to the bucket in the target region.

Using Direct Connect to Access OBS

Describes how to use Direct Connect to establish a stable, high-speed, low-latency, and secure dedicated network connection between your on-premises Internet Data Center (IDC) and Huawei Cloud. You can access OBS through Direct Connect by using each bucket's private IP address or an Elastic Load Balance (ELB) proxy.

Using CDN to Accelerate Access to OBS

Describes how to use the acceleration function of Content Delivery Network (CDN) to quickly retrieve data from OBS, with optimal user experience and reduced costs on data transfer.

Using a User-Defined Domain Name to Host a Static Website

Describes how to use a user-defined domain name to host static websites on OBS, for you to quickly launch personal and enterprise static websites without setting up website servers.

Suggestions on OBS Security Configuration

Provides actionable guidance for enhancing the overall security of using OBS.

Avoiding Data Loss Due to Misoperations

Introduces several methods you can use to help prevent service interruptions caused by accidental deletion. OBS data that you manually delete or overwrite or that is automatically deleted (by a lifecycle rule or because outstanding charges are not paid when the retention period ends) cannot be recovered on Huawei Cloud.

Avoiding Financial Losses or Resource Drain Due to Malicious Access

Introduces measures that help minimize security risks. If your OBS bucket or parallel file system is attacked or receives malicious traffic, data leakage and traffic surges may occur, resulting in resource exhaustion and financial losses. In addition, if your account balance is used up and the account goes into arrears, your services may be affected.

Avoiding Unauthorized Access Due to Account and Password Leakage

Introduces methods that help mitigate the risk of unauthorized access:

  • Permissions management, including IAM permissions and bucket policies
  • Multi-factor authentication (MFA)
  • Temporary access keys

Enforcing Bucket Encryption

Describes how to meet high security and compliance requirements. You can use a service control policy (SCP) in Organizations to enforce server-side encryption. This policy ensures that any member account it applies to has server-side encryption enforced when creating buckets, and encryption cannot be disabled for existing buckets.

Suggestions on OBS Performance Optimization

Describes how to add random prefixes to object names to achieve horizontal expansion for high-speed requests, thereby improving the access rate and reducing access latency.

Using OBS to Decouple Storage from Compute in Big Data Scenarios

Describes how to use the Huawei Cloud big data solution with decoupled storage and compute. This solution requires significantly fewer compute and storage resources and servers than the traditional solution, greatly increasing resource utilization and reducing the total cost of ownership (TCO).

Using EG Event Notifications to Automate Image Processing in OBS

Describes how to automate follow-up workflows to improve operational efficiency after objects are uploaded to or deleted from your OBS bucket. In this practice, when an image is uploaded to the source bucket, EG automatically notifies FunctionGraph of the upload event. The function then adds a watermark to the image and uploads the processed image to the target bucket.

Using LTS to Parse Bucket Logs

Describes how to use Log Tank Service (LTS), EventGrid (EG), and FunctionGraph to continuously report each OBS bucket log to LTS for search and analysis.

Enterprise Data Access Control

Describes how to configure access to enterprise data. After subscribing to OBS, enterprises can configure the following four types of access control to manage access to their data:

  • Grant only required permissions to employees in different departments to isolate access to the enterprise data.
  • Grant permissions to users of a department or project to download the shared data but not to write or delete the shared data.
  • Allocate IAM users with different roles to each department and use bucket policies to authorize the IAM users independent permissions on resources.
  • Add external buckets on OBS Browser+ to isolate bucket resources between departments.