search

tweag / nix-store-gcs-proxy

A HTTP nix store that proxies requests to Google Storage
Apache License 2.0
9 stars 1 forks source link

Consider using signed URLs instead of proxying #1

Open adisbladis opened 5 years ago

adisbladis commented 5 years ago

Using signed URLs is a better solution than the proxy having to sling all the data through.

This means among other things that a proxy can be deployed in different regions from the buckets without causing excessive egress traffic.

See https://cloud.google.com/storage/docs/access-control/signed-urls.

flokli commented 5 years ago

This is currently a bit clunky to use - however, there's https://github.com/googleapis/google-cloud-go/issues/1495 which should improve matters, with a changeset at https://code-review.googlesource.com/c/gocloud/+/42871.