Configure the S3 Reverse Proxy to route and load-balance client S3 traffic across multiple backend endpoints. The S3 reverse proxy firewall topology ensures secure access, high availability, and scalable distribution while keeping backend storage endpoints isolated.
Note
The Commvault Network Proxy can also function as a Reverse Proxy for S3 Endpoints, eliminating the need for separate reverse proxy infrastructure.
Before You Begin
Create client groups for S3 infrastructure:
-
S3 Endpoint Group: Create a client group containing MediaAgents with S3 endpoints installed (for example,
S3-Endpoints). These backend servers handle S3 API requests and data storage operations. -
S3 Reverse Proxy Client Group: Create a client group for reverse proxy nodes (for example,
S3-Reverse-Proxy). These frontend nodes receive client connections and distribute traffic to backend endpoints.
To create server groups, see Adding a Server Group by Using Manual Association.
Create S3 Reverse Proxy Topology
-
From the Command Center navigation pane, go to Manage > Network.
The Network page appears.
-
Click the Network Topologies tab.
-
In the upper-right corner of the page, click Add topology.
The Add Topology wizard appears.
-
In the Topology name field, enter a name for the topology.
-
For Client type, select S3 reverse gateway.
-
From the Topology type list, select One-way.
-
Click Next.
-
On the Network page, configure the topology:
-
S3 Endpoints: Select your S3 Endpoint Group.
-
S3 Reverse Network Gateways: Select your S3 Reverse Proxy Client Group.
-
-
Click Next.
-
On the Advanced page, click Submit.