Securing Nutanix Objects S3 access with CA Certs.

Anirudha | Wed, 10/02/2019 - 14:48

Nutanix Objects provides S3 service on port 80 and 443, i.e it supports http and https both the protocols out of the box. 

While both these endpoint provides exactly the same feature/API’s but there are few things to look at when to use http and https protocol . And why should you prefer https over http for your production use.

 

Which protocol to use:
  • Http requests are sent in plain text , which means its fast since there is no encryption or decryption done but its not secured. Simple tcp packet captures will expose all your data.
  • Https on the other hand is secure. Server and client uses common algorithm to encrypt data. And server has to prove its authenticity to client. This does requires some CPU cycles which makes is a little slow compared to http protocol.

 

Accessing Nutanix Objects over http/s in cyberduck:
  • Enter the  Nutanix Objects endpoint in URL and Port:80 for http and 443 for https.
  • Provide access & secret keys which you downloaded from Nutanix Objects UI in Prism Central. That’s it.

 

There is a lot more happens in the background in order to secure your data when you use https . Let's take a quick look at it.