Speed, Security, Simplicity. Turbo‑charge your S3, GCS or MinIO workloads with single‑endpoint access, Python‑powered policy enforcement and wire‑speed throughput.
Drop the proxy in front of any S3‑compatible bucket. It speaks OIDC, SAML, JWT, mTLS and transparently signs the request – no presigned URLs or hard‑coded keys.
One stable hostname for all buckets – you control traffic and eliminate direct connections between clients and storage back‑ends.
Auth & streaming live in the same memory space. That means up to 40 % lower p99 latency versus sidecars or external gateways.
Write compliance rules once, in plain Python – or call out to OPA/Redis/SQL. The proxy evaluates on every request so dev teams stay focused on features.
Configuring the proxy is as easy as writing Python code. Define your policies, authentication methods, and routing rules in a simple, readable format.
Prometheus metrics & OpenTelemetry traces wrap the exact bytes crossing the wire – no Lua or eBPF mods required.
Abstracts away bucket vendor. Switch from S3 today to Google tomorrow – your clients won’t notice a thing.
For secure access to your object storage, generate pre-signed URLs and restricted their usage to a limited number of uses to ensure security and prevent misuse.
Each client authenticates once; the proxy handles credential fetching, bucket selection and request signing. Your security team gets a single choke‑point, your developers get a single SDK.
pip install osp # instantly available on PyPI
from osp import start_server, ProxyServerConfig
start_server(ProxyServerConfig(...))