MultistoreA multi-runtime S3 gateway proxy with authentication, authorization, and zero-copy passthrough.

Built in Rust. Deploy as a native server or Cloudflare Worker.

🔗

Unified Interface

One stable URL per dataset, regardless of which object storage provider hosts the bytes. Backend migrations are invisible to data consumers.

📦

Native S3 Compatibility

Works with aws-cli, boto3, DuckDB, obstore, GDAL, or any other S3-compatible client. No custom SDK — just set the endpoint URL.

🔐

Flexible Auth

OIDC token exchange for both frontend (user/machine identity) and backend (cloud storage credentials). No long-lived keys anywhere in the chain.

⚡

Multi-Runtime

Same core logic deploys as a native Tokio/Hyper server in containers or as a Cloudflare Worker at the edge.

🚀

Zero-Copy Streaming

Presigned URLs enable direct streaming between clients and backends. No buffering, no double-handling of request or response bodies.

🧩

Extensible

Pluggable traits for request resolution, configuration, and backend I/O. Build your own proxy with custom auth, namespace mapping, and storage backends.

How It Works

The proxy sits between S3-compatible clients and backend object stores. It authenticates incoming requests, authorizes them against configured scopes, and forwards them to the appropriate backend using presigned URLs for zero-copy streaming.

Get Started

The Getting Started guide walks you through setting up, configuring, and deploying the proxy — defining backends, buckets, roles, authentication, and extending with custom resolvers and providers.