[HN Gopher] I Just Want Simple S3
___________________________________________________________________
I Just Want Simple S3
Author : g0xA52A2A
Score : 71 points
Date : 2026-04-11 10:36 UTC (2 days ago)
(HTM) web link (blog.feld.me)
(TXT) w3m dump (blog.feld.me)
| ChromaticPanic wrote:
| Garage "unnecessarily complex" . If anything it's the simplest
| solution in the list especially compared to Ceph or Apache Ozone
| leosanchez wrote:
| Tried setting up rustfs today. It was easier that garagehq and
| it even comes with UI.
| evil-olive wrote:
| RustFS is the poster child in my mind for the worst kind of
| vibe-coded slop. it might be "simple" but it's not something
| I would ever trust with persistent data.
|
| last year they had a security vulnerability where they
| allowed a hardcoded "rustfs rpc" token to bypass _all_
| authentication [0]
|
| and even worse, if you read the resulting reddit thread [1]
| someone tracked down the culprit commits - it was introduced
| in July [2] and not even reviewed by another human before
| being merged.
|
| then the fix 6 months later [3] mentions fixing a _different_
| security vulnerability, and seemingly only fixed the
| hardcoded token vulnerability by accident. that PR was also
| only reviewed by an LLM, not a human.
|
| 0: https://github.com/rustfs/rustfs/security/advisories/GHSA-
| h9...
|
| 1: https://www.reddit.com/r/selfhosted/comments/1q432iz/updat
| e_...
|
| 2: https://github.com/rustfs/rustfs/pull/163/
|
| 3: https://github.com/rustfs/rustfs/pull/1291
| 0x457 wrote:
| I think only "complex" thing in garage is the layout which only
| matters if you're doing distributed mode.
| otterley wrote:
| So use S3.
| jockm wrote:
| While not obvious from the article, it appears that they want
| something S3 like, but isn't from Amazon, and possibly want to
| self host it. The article could be much more clear about the
| goals
| larrymcp wrote:
| Ah, thanks. Yeah I was confused because in his long list of
| vendors he didn't mention Wasabi, Backblaze etc. It appears
| that I do not know the context of his post.
| sudb wrote:
| or cloudflare R2 for that matter (very useful for egress-
| heavy workloads for which it is ~free)
| moondev wrote:
| microceph is pretty nice and straightforward for throwaway s3
| endpoints
|
| https://canonical-microceph.readthedocs-hosted.com/stable/tu...
| coredog64 wrote:
| Has anyone that has set up microceph determined the overhead of
| the required multiple OSDs? The docs make it sound scary, but
| it's not clear if that's because people run it on a Pi with an
| sdcard for block storage or because someone once ran 18TB of
| OSDs in production that then fell over.
| jauntywundrkind wrote:
| I do continue to be impressed/ over-awed by how effectively
| scared the Ceph docs are about just how many system resources
| you need. To run a mid tier not that fast storage cluster.
| Bother.
|
| Impressive as hell software and I am so glad to have it. But
| man! The insistence on mountains of ram per TB, on massive IO
| is intimidating.
| panarky wrote:
| Sounds like you want S4. Super simple storage service.
| sonnyz wrote:
| Listen to this: 7... Minute... Abs. You walk into a video store
| and you see 8 minute abs and 7 minutes abs. Which one are you
| gonna buy?
| scottfits wrote:
| 100% - i really wanted Render to add this, feels like there is
| potential for a startup here
| sudb wrote:
| I think the post author is mainly addressing self-hostable
| and/or open-source options here - otherwise I'd expect a whole
| host of other commercial storage providers to have been
| mentioned!
| anurag wrote:
| Render has Object Storage in alpha: https://render.com/object-
| storage
| pkghost wrote:
| Based on the list of contenders feels like you might be missing
| rsync.net?
| jerf wrote:
| I think we get a "S3 clone" about once every week or two on the
| Golang reddit.
|
| It strikes me as a classic case of "we need all the interested
| people to pull in one project, not each start their own". AI may
| have made this worse then ever.
| pphysch wrote:
| Diverse competition is the best way to identify a winning
| formula, which can then be perfected by a fewer number of
| players.
| CobrastanJorji wrote:
| I think it's like NES emulators. It's not that anyone needs one
| more. It's just that they're fun to make.
| mickael-kerjean wrote:
| I'm the author of Filestash, one of the projects listed. Our
| approach is quite unique in that we don't own your storage, you
| do, Filestash is just a proxy. You point it at whatever storage
| you already have (SFTP, FTP, WebDAV, Azure, SMB, IPFS, NFS,
| another S3 etc.), generate S3 keys bound to a specific backend
| and path, and it proxies everything through.
| lewtun wrote:
| Hugging Face Buckets are pretty simple:
| https://huggingface.co/docs/huggingface_hub/en/guides/bucket...
|
| Disclaimer: I work at HF
| nate wrote:
| I only recently realized how much I like using Cloudflare more
| than AWS :) R2 (their version of S3) is no exception. Much more
| pleasant figuring out how to use and configure it in Cloudflare
| than the craziness inside AWS.
| CobrastanJorji wrote:
| This is an interesting write up, but I'm curious about the use
| case. If you don't need to scale, and you don't need to replicate
| anything, why do you want S3 specifically? Are you using a tool
| that wants to write to something S3-like? Do you just like
| reading and writing objects via HTTP POST and GET? Are you moving
| an app to or from the cloud?
| tptacek wrote:
| It's probably the most important storage API in the industry.
| Implementing it gives you on-prem storage, AWS S3 (the Hoover
| Dam of Internet storage megaprojects, arguably the most
| reliable store of any kind available to any normal programmer),
| and a whole ecosystem of S3-compatible options with different
| features and price points.
|
| It's a little like asking why you'd use SQL.
| CobrastanJorji wrote:
| The S3 standard is certainly really important. It's perhaps
| the most important web standard without any sort of standards
| organization or formal spec (seriously, Amazon, I'm begging
| you to open up to ISO or IEC or SNIA or somebody).
|
| And SQL is also very important. And yet, if somebody said "I
| need to store data, but it's not relational, and I just need
| 1000 rows, what's the best SQL solution," I would still ask
| why exactly they needed SQL. The might have a good reason
| (for example, SQLite can be a weirdly good way to persist
| application data), but I don't know it yet. That's why I
| asked.
| colechristensen wrote:
| I want my application servers to be stateless and I've got
| state to keep that looks a lot more like files than database
| rows.
|
| And I want things like backup, replication, scaling, etc. to be
| generic.
|
| I wrote a git library implementation that uses S3 to store
| repositories for example.
| uroni wrote:
| I made https://github.com/uroni/hs5 -- focus is on single node
| and high performance. So plenty of alternatives available.
| amarsahinovic wrote:
| S3-compatible storage solution:
| https://www.hetzner.com/storage/object-storage/
| tptacek wrote:
| They want to run it locally.
| phibz wrote:
| Why do rust compile times matter for a production deployment?
| tptacek wrote:
| Since this has come up 4-5 times on the thread already, the clear
| subtext of this post is that this developer wants to build to the
| S3 API, but run their storage locally --- maybe for testing
| reasons, maybe for data hygiene reasons, maybe for performance
| reasons. So things like "what about Hugging Face's object storage
| product" don't really answer their question.
___________________________________________________________________
(page generated 2026-04-13 23:00 UTC)