Starting in November 2021, all customer environments of the DRACOON cloud to which customers have not connected their own S3 storage will be successively migrated to DRACOON's own S3 object storage. You will not notice this change if you use the official DRACOON clients (such as the DRACOON Web App or DRACOON for Windows/Mac). However, if you have developed your own integrations, custom solutions, or scripts based on the DRACOON API that upload/download files to/from DRACOON, you'll have to make some adjustments to your custom solutions. In addition, if you have enabled firewall rules that monitor download or upload API endpoints of DRACOON, you'll also have to adjust those.
Important: If you have connected your own S3 storage to DRACOON (in the DRACOON Web App under Settings > Storage), you are not affected by this change. You can also ignore this article if you use only the official DRACOON clients, do not use your own solutions (e.g. scripts) for uploading or downloading to or from DRACOON, and do not have any firewall rules active that monitor uploads and downloads from DRACOON.
Why is the DRACOON cloud being migrated to S3 storage?
DRACOON is constantly evolving to meet customer requirements in the best possible way—which is why, in the future, the DRACOON cloud storage will be operated separately from the DRACOON application by using S3-compatible storage with triple redundancy. In addition to the implementation of a highly modern storage architecture, this will greatly enhance the reliability of our data storage: Files stored in DRACOON will be triple-secured and distributed across different locations within Europe.
For storage, DRACOON relies on our proven partner noris network AG, located in Nuremberg/Germany.
Will I still be able to connect my own S3 storage to DRACOON after the DRACOON cloud has been migrated to S3 storage?
Yes, if you decide to connect your own S3 storage to DRACOON and to use it instead of DRACOON's own S3 storage, you can do this at any time in the DRACOON Web App under Settings > Storage.
What will change when migrating to S3 storage?
In the future, each DRACOON customer environment will receive its own so-called bucket in our new, disaster-proof S3 storage.
The change of the DRACOON cloud storage itself will have no effect on the integrity of your data or the functionality of the DRACOON cloud—all features will continue to be available.
However, the change means that DRACOON will use the established S3 standard (AWS Simple Storage Service) for all upload and download operations in the future and that these will take place directly on our connected S3 storage—hence, the new upload and download procedures to be used will be called S3 direct upload and S3 direct download.
All official DRACOON clients already support S3 direct upload and S3 direct download and will use them automatically after the storage is switched to S3—your end-users will not notice this.
The endpoints of our API used for uploading and downloading will change due to the switch to S3 storage.
If you …
- have enabled firewall rules that monitor DRACOON upload and download endpoints or
- use custom integrations or scripts where files are uploaded or downloaded to or from DRACOON,
you should make the following adjustments:
- Firewall rules should be adapted to the new endpoints and in particular S3 URLs (see below) that will be used for data traffic (upload and download) in the future.
- Custom scripts and integrations that upload or download files to or from DRACOON should be modified by the end of Q1 2022 according to the information mentioned below.
What exactly needs to be adjusted for using S3 direct upload and S3 direct download in custom solutions or firewall rules?
The endpoints below apply to any DRACOON customer environment.
Example for the default environment dracoon.team: https://dracoon.team/api/v4/uploads
Download files from DRACOON
Current process (conventional download without S3)
- Get download URL
POST /api/v4/nodes/files/{file_id}/downloads - Download file chunk(s) from download URL
GET /api/v4/downloads/{token}
New required process (S3 direct download)
- Get download URL
POST /api/v4/nodes/files/{file_id}/downloads - Download file chunk(s) from download URL
GET {s3_URL}
Upload files to DRACOON
Current process (conventional upload without S3)
- Open upload channel
POST /api/v4/nodes/files/uploads - Upload file chunk(s)
POST /api/v4/uploads/{token} - Complete upload
PUT /api/v4/uploads/{token}
New required process (S3 direct upload)
- Open upload channel
POST /api/v4/nodes/files/uploads - Get S3 direct upload URL
POST /api/v4/nodes/files/uploads/{uploadId}/s3_urls - Upload file chunk(s)
PUT {s3_URL} - Complete upload
PUT /api/v4/nodes/files/uploads/{uploadId}/s3
The S3 URLs are so-called presigned URLs, which are structured as follows:
https://cloud-{numeric customer ID}.s3.nbg01.de.dracoon.io/...
cloud-{numeric customer ID} corresponds to the bucket name of your DRACOON environment.
Direct links (S3 URLs) to the location, such as those returned by the DRACOON API, are temporarily retrievable only by authenticated users and are not displayed to users.
Tip: Easy adaption by using the DRACOON SDKs
If you have developed your DRACOON solution in Java, C#, or Swift, we recommend the use of our DRACOON SDKs, which we offer for these languages. In our SDKs, S3 direct upload or S3 direct download will be used automatically if you use the general upload or download routines of the SDKs.
When must the adaption of custom solutions and firewall rules be completed?
Starting August 1, 2022, only S3 direct upload or S3 direct download can be used for uploads and downloads on the DRACOON cloud according to the above API endpoints—by then, you must have adapted your custom solutions and, if necessary, firewall rules accordingly. The previous API endpoints can still be used until then (even after the migration to S3 storage).
More information about S3 storage and DRACOON
If you want to learn more about S3 direct upload and download, presigned URLs, and how S3 Object Storage works in general:
More information about S3 storage and DRACOON
How can I get help or support?
If you have any further questions about this change or need assistance with any necessary adjustments, please contact our support team.
Comments
0 comments
Article is closed for comments.