Neo SPCC Launches NeoFS S3 Gateway v0.45.1: Performance Enhancements and Metadata Fixes

Key Updates Include Write Buffering and Ranged GET Optimizations

Enhanced EACL Application During Container Creation

Fix for System Attributes in Metadata Responses

Important Dependency Updates for Improved Security and Performance

Full Release Notes Available Here: NeoFS S3 Gateway v0.45.1

Neo SPCC Unveils NeoFS S3 Gateway v0.45.1: Performance Boosts and Enhanced Security

August 4, 2023 — Neo SPCC has announced the release of NeoFS S3 Gateway v0.45.1, a patch update designed to enhance the performance and security of its decentralized storage solution. This latest version introduces three key optimizations and a critical metadata fix to the S3-compatible interface, building on the foundation laid by the previous major release, v0.45.0.

The new update comes just days after the launch of NeoFS SDK Go RC21 and NeoFS Node v0.55.0, which provide the backbone for two of the performance enhancements. Notably, existing users of v0.45.0 can seamlessly transition to v0.45.1 without any migration requirements.

Key Enhancements

1. Write Buffering and Ranged GET Optimizations

The first major improvement in v0.45.1 leverages the io.ReaderFrom interface for object payload writing. This advancement minimizes memory allocation and CPU overhead during PUT operations by eliminating unnecessary data copies, thus streamlining the write process.

The second optimization focuses on ranged GET requests. Previously, these requests necessitated a separate round-trip to fetch the object header before accessing the desired data. With the integration of SDK RC21’s HTTP-alike byte range parameters, the gateway can now retrieve both the header and the ranged payload in a single call. This enhancement is particularly beneficial for applications involving streaming media, partial downloads, and multipart uploads.

2. EACL Set During Container Creation

In a significant improvement to user experience, Extended Access Control Lists (EACL) can now be applied during the same network call as container creation. This change reduces latency and eliminates a potential security gap where a newly created container could exist without its intended access policy.

3. System Attributes Fix

A critical correctness fix has been implemented to filter out NeoFS internal system attributes from GetObject metadata responses. Previously, these internal details were inadvertently exposed alongside user-defined metadata, which could lead to confusion and security concerns. The fix ensures that only user-defined metadata is returned, aligning with standard S3 API behavior.

Security and Maintenance Updates

In addition to the performance enhancements, v0.45.1 includes vital security and maintenance updates for several dependencies, including golang.org/x/crypto, golang.org/x/net, and google.golang.org/grpc. The gRPC update addresses potential vulnerabilities, including mitigations for HTTP/2 frame flood denial-of-service attacks and fixes for authorization bypass scenarios.

For those interested in the full release notes, they can be accessed here.

As Neo SPCC continues to refine its offerings, the release of NeoFS S3 Gateway v0.45.1 marks another step forward in delivering a robust, efficient, and secure decentralized storage solution.