Pick a country, choose a tier, and provision an erasure-coded bucket with scoped S3 keys in a single call. Built on Ceph RGW Tentacle with dedicated Direct and Reseller isolation across Scotland, the UK, and England.
# Provision a 1 TiB bucket & keypair in Scotland (SC)
curl -s https://console.wallpine.com/wallpine.storage.v1.StorageService/CreateSimpleBucket \
-H "Authorization: Bearer wp_live_..." \
-d '{"country_code":"SC","tier_code":"standard","bucket_name":"media-vault","quota_bytes":1099511627776}'
{
"bucket": {
"name": "media-vault",
"s3_endpoint_url": "https://scot.s3.wallpine.com",
"region": "scot-direct",
"status": "active"
},
"key": { "access_key_id": "..." },
"secret_access_key": "shown-once"
}Every country exposes separated Direct and Reseller Ceph realms with dedicated data, SSD index, and extra pools so partner workloads never contend with direct customer accounts.
Glasgow Edge · Tentacle 20.2.5
https://scot.s3.wallpine.com
https://scot-reseller.s3.wallpine.com
UK Namespace · Tentacle 20.2.5
https://uk.s3.wallpine.com
https://uk-reseller.s3.wallpine.com
England Namespace · Tentacle 20.2.5
https://eng.s3.wallpine.com
https://eng-reseller.s3.wallpine.com
Customer S3 objects stream straight through TLS-terminated Nginx proxies with buffering disabled. Management RPCs travel through a hardened Rust gateway, signed NATS JetStream principals, and an allowlisted Admin Ops boundary.
Customer S3 endpoints disable buffering and block /admin paths. Administrative operations use a separate allowlisted gateway (admin-scot-api) with per-location keys.
Location secrets are sealed with AES-256-GCM (WP_MASTER_KEY), API tokens are Argon2id-hashed with one-time reveal, and every mutation appends a hash-chained audit record.
Users, keys, quotas, buckets, and hourly usage logs stay anchored in Ceph RGW so Postgres mirrors remain fully rebuildable and reconcilable without drift.
Standard AWS Signature v4 authentication with virtual-hosted or path-style addressing, multipart uploads, bucket quotas, and rclone/mc/Terraform workflows.
# 1. Configure credentials with your Wallpine access & secret key
aws configure --profile wallpine
# 2. List objects or upload to your chosen regional endpoint
aws s3 ls s3://my-app-backups/ \
--endpoint-url https://scot.s3.wallpine.com \
--region scot-direct
aws s3 cp ./archive-2026.tar.zst s3://my-app-backups/ \
--endpoint-url https://scot.s3.wallpine.com \
--region scot-direct
Every tier snapshots its rates in tier_price_history so historical usage rolls up accurately across price updates, direct accounts, and reseller margins.
| Dimension | Storage Tier Mapping | Collection Source | Export Support |
|---|---|---|---|
| Active Storage (GB-month) | Placement default-placement (EC 8+2 ISA-L + zstd) |
Daily RGW bucket stats + hourly rollup | ConnectRPC JSON & CSV (ExportUsage) |
| Class A Requests (per 10k) | PUT, POST, COPY, LIST operations | Per-location Ceph RGW usage log | Tenant-scoped & per-bucket breakdown |
| Class B Requests (per 10k) | GET, HEAD metadata & object reads | Per-location Ceph RGW usage log | Tenant-scoped & per-bucket breakdown |
| Bandwidth / Egress (GB) | Outbound bytes_sent metered per bucket |
Hourly RGW collector with watermark | Real-time stream via /events WebSocket |
| Reseller Channels | Dedicated realms (*-reseller.s3.wallpine.com) |
Isolated multi-tenant paths & custom pricing | Automated margin & invoice-ready exports |