encryption/decryption between backend and s3proxy

gaul / s3proxy

Access other storage backends via the S3 API

Apache License 2.0

1.65k stars 220 forks source link

encryption/decryption between backend and s3proxy #599

Open nonix opened 5 months ago

nonix commented 5 months ago

Hi guys, I am new to this S3proxy. And would appreciate your help. I am looking for ability to encrypt / decrypt payload on the way to/from backend. The task:

My client send PUT request to store the payload to S3 (compatible) backend as un-encrypted.
The S3Proxy should "intercept" and encrypt the payload with a pre-configured keys ideal using AES 256-CBC
Than store the encrypted payload on S3 backend
Analogues on the way back.

Is this possible to achieve with this S3Proxy?

Thank you, N.

gaul commented 4 months ago

S3Proxy has an EncryptedBlobStore middleware. However this is not currently discoverable: https://github.com/gaul/s3proxy/pull/398#issuecomment-1498378310

It would be great if either @nonix or @FlorinPeter could add a wiki page for this.