Enterprise Features,

Full S3 compatibility, erasure coding, encryption, event notifications, and compliance — in a ~2 MB binary with zero external dependencies.

S3 API

60+ S3 Operations, Zero Compromises

Flashstor implements the full S3 REST API — bucket management, multipart uploads, versioning, encryption, lifecycle policies, replication, and S3 Select SQL queries. Use your existing tools and SDKs without modification.

  • Bucket operations: CRUD, versioning, lifecycle, replication, CORS, encryption
  • Object operations: GET/PUT/DELETE, multipart (up to 10,000 parts), range reads
  • S3 Select: Full SQL engine with SELECT, WHERE, LIKE, aggregate functions
  • Admin API: 30+ endpoints for user/group/policy management
  • SigV4 authentication with header and presigned URL support
# Python — Boto3 example
import boto3
s3 = boto3.client("s3",
endpoint_url="http://localhost:9000",
aws_access_key_id="admin",
aws_secret_access_key="changeme123")
s3.create_bucket(Bucket="data")
s3.put_object(Bucket="data",
Key="report.pdf", Body=payload)
Security

Four Layers of Defense

Flashstor implements defense-in-depth with four distinct security layers, each independently audited and hardened.

Layer 1

Network

  • • TLS 1.2/1.3 with automatic HTTPS via certificate directory
  • • HTTP/2 over ALPN with configurable connection limits
  • • Anti-slowloris header timeout protection
  • • TCP_CORK packet coalescing for reduced network overhead
Layer 2

Authentication

  • • AWS SigV4 with 15-minute clock skew tolerance
  • • STS AssumeRole for temporary scoped credentials
  • • IAM users, groups, and policies with condition evaluation
  • • Timing-safe CRYPTO_memcmp for signature verification
Layer 3

Encryption

  • • SSE-S3: Server-managed AES-256-GCM with unique DEK per object
  • • SSE-C: Customer-provided 256-bit encryption keys
  • • Direct AESNI implementation — no EVP overhead
  • • ISA-L Crypto multi-buffer accelerated SHA-256 and AES
Layer 4

Data Integrity

  • • SHA-256/BLAKE2b/HighwayHash bitrot detection with background scanner
  • • Reed-Solomon erasure coding for fault tolerance
  • • CRC32C via PCLMUL instruction set for fast checksums
  • • Quorum-based metadata consensus across distributed nodes
65x
EC Speedup (ISA-L)
5 TiB
Max Object Size
10K
Max Parts/Upload
Protection Status
Erasure Coding Active
Bitrot Scanner Running
Replication Healthy
Data Protection

Your Data, Fully Protected

From erasure coding to cross-site replication, Flashstor provides multiple layers of data protection to ensure durability and availability.

  • Reed-Solomon erasure coding with configurable M data + N parity shards
  • Cross-endpoint replication with PENDING → REPLICATED state machine
  • Storage tiering with ILM lifecycle rules for cost optimization
  • Object Lock (WORM) with Governance and Compliance retention modes
  • Automatic bitrot detection and background repair scanner

Integrates with Your Existing Stack

Drop-in compatibility with the tools and SDKs your team already uses

AWS CLI

Standard S3 operations with --endpoint-url flag. No custom plugins required.

Boto3 (Python)

Full AWS SDK compatibility for Python applications and data pipelines.

rclone

Multi-cloud sync and migration tool for moving data between storage backends.

Webhook Events

Real-time HTTP POST notifications on bucket and object events.

Kafka & AMQP

Native wire protocol support for event streaming to Kafka and RabbitMQ.

S3 Select

SQL query engine for filtering CSV and JSON data directly in storage.

Feature Comparison

See how Flashstor compares to traditional and cloud-based object storage solutions

Capability Flashstor Traditional (Go) Cloud S3
Binary Size ~2 MB 80+ MB N/A (SaaS)
Cold Start <10 ms 200-500 ms N/A (SaaS)
GC Pauses Zero 10-50 ms Unknown
S3 API Coverage
Erasure Coding (SIMD) Proprietary
Server-Side Encryption
Self-Hosted
Edge / Embedded Viable

See These Features in Action

Request a live demo and we'll walk through every feature with your team — using your actual use cases and data patterns.

Request Demo View Architecture