Object Storage Service. Client Guide (OBS Browser) Issue 10 Date HUAWEI TECHNOLOGIES CO., LTD.

Transcription

1 Issue 10 Date HUAWEI TECHNOLOGIES CO., LTD.

2 2018. All rights reserved. No part of this document may be reproduced or transmitted in any form or by any means without prior written consent of Huawei Technologies Co., Ltd. Trademarks and Permissions and other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd. All other trademarks and trade names mentioned in this document are the property of their respective holders. Notice The purchased products, services and features are stipulated by the contract made between Huawei and the customer. All or part of the products, services and features described in this document may not be within the purchase scope or the usage scope. Unless otherwise specified in the contract, all statements, information, and recommendations in this document are provided "AS IS" without warranties, guarantees or representations of any kind, either express or implied. The information in this document is subject to change without notice. Every effort has been made in the preparation of this document to ensure accuracy of the contents, but all statements, information, and recommendations in this document do not constitute a warranty of any kind, express or implied. Huawei Technologies Co., Ltd. Address: Website: Huawei Industrial Base Bantian, Longgang Shenzhen People's Republic of China support@huawei.com i

3 Contents Contents 1 Basic Knowledge of OBS OBS Browser Overview Function Description Getting Started PC Specifications Required by OBS Browser Registering a Public Cloud Service Account Enabling OBS User Permissions Logging In to OBS Console Starting OBS Browser Creating Access Keys (AKs and SKs) Logging In to OBS Browser Creating a Bucket Creating a Folder Uploading a File or Folder Downloading a File or Folder Deleting a File or Folder Deleting a Bucket Related Operations Configuring the System Managing Accounts Updating OBS Browser Feedback Storage Classes Storage Classes Overview Application Scenarios Managing Buckets Creating a Bucket Searching for a Bucket Viewing Basic Information About a Bucket Fragments Management Deleting a Bucket ii

4 Contents 6 Managing Objects Creating a Folder Accessing an Object Using Its Object URL Searching for a File or Folder Uploading a File or Folder Downloading a File or Folder Deleting a File or Folder Restoring an Archive File on OBS MD5 Verification Bucket ACL Bucket ACL Overview Setting ACL Permissions for Buckets Lifecycle Management Lifecycle Management Overview Configuring a Lifecycle Rule Bucket Policy Bucket Policy Overview Configuring a Bucket Policy CORS CORS Overview Configuring CORS Logging Logging Overview Configuring Logging Adding External Buckets External Buckets Overview Adding External Buckets Server-Side Encryption Server-Side Encryption Overview Uploading a File with Server-Side Encryption Task Management Managing Upload Tasks Managing Download Tasks Managing Deletion Tasks Managing Restoration Tasks Typical Application Storing Video Data Backing Up and Archiving Data iii

5 Contents 16 Troubleshooting Objects Cannot Be Globally Searched for in a Bucket Object URL Cannot Be Opened Using a Browser No Upload Task Is Created After a Large Number of Files Are Selected for Upload Using OBS Browser Blue or Black Screen of Death Occurs When Files Are Uploaded Using OBS Browser Relevant Tasks Are Not Displayed in the Task List When Objects Are Managed Using OBS Browser Time Difference Is Longer Than 15 Minutes Between the Client and the Server List of OBS Error Codes Change History iv

6 1 Basic Knowledge of OBS 1 Basic Knowledge of OBS Object Storage Service (OBS) is an object-based storage service that provides customers with massive, secure, reliable, and cost-effective data storage capabilities. Services include but are not limited to bucket creation, modification, and management, as well as object upload, download, and management. OBS provides super large storage capacity that can store all file types and is suitable for websites, enterprises, developers, and common subscribers. OBS allows you to easily access any hot or cold stored data develop a wide range of upper-layer applications. As an Internetbased service, OBS provides web service interfaces over HTTP and HTTPS. With OBS Console or OBS Browser, you can access and manage data stored on OBS from any Internetconnected computer anytime, anywhere. In addition, OBS supports REST API interfaces. Cloud services allow infrastructures to be deployed in multiple regions and deliver flexible expansion and enhanced reliability. Users can deploy OBS in specific areas to obtain fast access speeds at an affordable price. You can access OBS using either of the following tools: OBS Console, REST API, and OBS Browser. For details about OBS, see the Object Storage Service Product Introduction. 1.1 OBS Browser Overview OBS Browser is an object storage service client that runs on a Windows operating system. It can help you effortlessly manage object storage on your personal computers. Table 1-1 provides personal computer (PC) specifications required by OBS Browser. 1

7 1 Basic Knowledge of OBS Table 1-1 PC specifications required by OBS Browser Item Specifications Remarks Operating system CPU Memory Available space of the installation CD-ROM Available space of the data disk Windows XP Pro X64 Edition Windows 7 Pro SP1 32-bit Windows 7 Pro SP1 64-bit Windows 8 Pro 32-bit Windows 10 Pro 64-bit Windows Server 2008 R2 standard SP1 64-bit Windows Server 2012 standard SP1 64-bit Minimum: 2-core 1.6 GHz CPU Standard: 2-core 2.4 GHz CPU Minimum: 4 GB Standard: 8 GB Available memory 512 MB 512 MB 3 GB Disk space required for installing OBS Browser Disk space required for storing data files in the database of OBS Browser (the data files are stored in the system disk in the current version.) NOTICE When OBS Browser runs on a 32-bit operating system, the maximum database storage space is 2 GB. When the number of tasks in the task list is more than 1 million, OBS Browser may work incorrectly. For better experience, use a 64-bit operating system. OBS Browser has a flattened GUI, which is friendly to Windows users. For a better experience, use devices with a display resolution of 1280 x 1024 or higher. Click at the upper right corner and choose About to view the version, or check the online help documents. 1.2 Function Description Table 1-2 describes the functions of OBS Browser: 2

8 1 Basic Knowledge of OBS Table 1-2 Function description Function Basic bucket operations Basic object operations Server-side encryption Bucket permissions Access log recording Lifecycle management Fragment management Object URL Large object upload Batch upload Multipart upload Batch download External bucket adding Task management Description Creates and deletes buckets of different storage classes in specific regions (service areas) and changes bucket storage classes. Manages objects by uploading (including multipart uploading), downloading, and deleting objects, and changing object storage classes. OBS allows users to encrypt objects using server-side encryption so that the objects can be securely stored on OBS. Manages bucket permissions, including bucket policies, access control lists (ACLs), and cross-origin resource sharing (CORS). Records bucket access requests in logs for request analysis and log audit. Supports the ability to set lifecycle rules for buckets to automatically delete expired objects. Fragments are incomplete data in buckets generated due to data upload failures. Fragment management enables you to clear fragments that have been generated. Shares data using the object URL. Uploads a single file or folder that is larger than 50 MB and less than 48.8 TB. Uploads objects in batches. Uploads objects in multiparts. Downloads objects in batches. Allow you to manage data shared by other OBS users. Allows you to upload, download, delete, and restore tasks. 3

9 2 Getting Started 2 Getting Started This chapter describes basic operations on OBS Browser. 2.1 PC Specifications Required by OBS Browser The user information, settings, and historical task information of OBS Browser are stored in the user's local path C:\Users\user account\appdata\local\obs. Sensitive information is encrypted. To avoid information leakage, do not set this directory to a shared directory. When using OBS Browser, do not use the administrator account. Use a common one. Table 1-1 provides personal computer (PC) specifications required by OBS Browser. Table 2-1 PC specifications required by OBS Browser Item Specifications Remarks Operating system CPU Memory Windows XP Pro X64 Edition Windows 7 Pro SP1 32-bit Windows 7 Pro SP1 64-bit Windows 8 Pro 32-bit Windows 10 Pro 64-bit Windows Server 2008 R2 standard SP1 64-bit Windows Server 2012 standard SP1 64-bit Minimum: 2-core 1.6 GHz CPU Standard: 2-core 2.4 GHz CPU Minimum: 4 GB Standard: 8 GB Available memory 512 MB

10 2 Getting Started Item Specifications Remarks Available space of the installation CD-ROM Available space of the data disk 512 MB 3 GB Disk space required for installing OBS Browser Disk space required for storing data files in the database of OBS Browser (the data files are stored in the system disk in the current version.) 2.2 Registering a Public Cloud Service Account You must register a public cloud service account before using OBS. Procedure Step 2 Step 3 Step 4 Open a browser. Log in to the HUAWEI CLOUD website at Click Register. Complete the registration as instructed. 2.3 Enabling OBS After the registration is complete, you are navigated to your account information page. You must recharge the account before using the OBS service. Procedure Step 2 Step 3 Step 4 Step 5 Log in to Console. Click Fees. The Billing Center window is displayed. Recharge the account as prompted. After the recharging, close the window. On the homepage, click Object Storage Service to enable the OBS service and log in to OBS Console. 5

11 2 Getting Started 2.4 User Permissions The cloud service system provides two types of user permissions by default: user management and resource management. User management refers to the management of users, user groups, and user group rights. Resource management refers to the control operations that can be performed by users on cloud service resources. For details, see Permission Description. OBS and other cloud resources are deployed separately. Table 2-2 describes the permissions. Table 2-2 OBS resource permissions Permission Name Tenant Administrator Tenant Guest OBS Bucket Viewer Description Permissions to operate OBS resources owned by an enterprise. Permissions to query the usage of OBS resources owned by an enterprise. Permissions to obtain bucket lists, query bucket metadata, and query bucket locations. Procedure Step 2 Step 3 Log in to OBS Console. On the top navigation bar, choose Service List > Management & Deployment > Identity and Access Management. The IAM console is displayed. Create a user group. 1. In the navigation pane on the left, click User Group. The User Group page is displayed. 2. Click Create User Group. The Create User Group page is displayed. 3. Enter a user group name in the User Group text box, enter a description (optional), and click OK. 4. In the row where the newly created user group is displayed, click Modify under the Operation column. The Modify User Group page is displayed. 5. In the table of User Group Permissions, locate the row where Global service > OBS is displayed, and then click Modify under the Operation column. The Policy dialog box is displayed. 6. Select the OBS and Base permissions, as shown in Figure

12 2 Getting Started Figure 2-1 OBS policy 7. Click OK. 8. Optional: If OBS uses other cloud services, enable corresponding permissions by choosing Global service > Global and setting the policy. 9. Click OK. Step 4 Create a user. 1. In the navigation pane on the left, click User. The User page is displayed. 2. Click Create User. The Create User page is displayed. 3. Enter a username, and set Credential Type and User Groups. NOTE If no user group is selected, the user does not have corresponding permissions. 4. Click Next. 5. Select Password Type and enter an address. 6. Click OK. 2.5 Logging In to OBS Console This section describes how to log in to OBS Console using a web browser. 7

13 2 Getting Started Procedure Step 2 Step 3 Log in to the HUAWEI CLOUD website at In the upper left corner, click Console. Log in using your account. If you have not registered with the public cloud, click Register and register a public cloud service account as prompted. Step 4 On the homepage of the Console, choose All Services > Storage > Object Storage Service. 2.6 Starting OBS Browser Procedure Download the OBS Browser software package. The OBS Browser software package is integrated in OBS Console. Log in to OBS Console and download OBS Browser from the home page of OBS Console. If you move the pointer over Download OBS Browser, you can view information about Version, Released, and Size of OBS Browser. You can click here to obtain the OBS Browser package. Step 2 Step 3 Decompress the OBS Browser software package to a folder whose absolute path length does not exceed 130 characters. Double-click the obs.exe file to start OBS Browser. Follow-up Procedure You can directly add a user account to manage resources on OBS. Alternatively, you can close OBS Browser and log in to OBS Browser to add your account when necessary. 2.7 Creating Access Keys (AKs and SKs) Context This section describes how to create access keys (AKs and SKs) in OBS Console. A pair of AK and SK is used to encrypt the signature of a request, ensuring that the request is secure and integral, and that identities of the request sender and receiver are correct. AKs and SKs support the authentication mechanism of Identity and Access Management (IAM). An Access Key ID (AK) defines a user that accesses the OBS system. An AK belongs to only one user, but one user can have multiple AKs. The OBS system recognizes the users that access the system by their AKs. 8

14 2 Getting Started A Secret Access Key (SK) is the key used by users to access OBS. It is the authentication information generated based on the AK and the request header. SKs and AKs are in one-to-one mapping. Restrictions and Limitations Prerequisites Procedure Each user can create up to two valid AK/SK pairs. A cloud account has been registered and activated. Step 2 Step 3 Step 4 Step 5 Log in to OBS Console. In the upper right corner of the page, click the username and select Basic Information from the drop-down list. On the displayed page, click Manage my credentials. On the My Credential page, click the Access Keys tab, and then click Add Access Key below the displayed access key list. In the Add Access Key dialog box that is displayed, enter the password and its verification code. NOTE If you have not bound an address or mobile number, you need to enter only the password. If you have bound an address and a mobile number, you can select the verification either by address or mobile number. Step 6 Step 7 Click OK. In the Download Access Key dialog box that is displayed, click OK to save the access keys to your browser's default download path. NOTE To prevent the access keys from being leaked, keep it secure. If you click Cancel in the dialog box, the access keys will not be downloaded, and you cannot download them later. You can re-create an access key if you need to use it. Step 8 Open the downloaded credentials.csv file to obtain the access keys (AK and SK). Follow-up Procedure The access keys (AK and SK) need to be updated regularly. If the AK and SK are used abnormally (including loss and leakage) or they are no longer needed, click Delete on the My Credential page to delete them. When deleting the AK and SK, you need to enter the login password and either an or mobile verification code. After the AK and SK are deleted, they will be permanently deleted and cannot be restored. 9

15 2 Getting Started 2.8 Logging In to OBS Browser Procedure This section describes how to log in to OBS Browser. Step 2 Double-click obs.exe to start OBS Browser. If you are starting OBS Browser for the first time, the Add Account dialog box is automatically displayed. Go directly to Step 4. In the upper right corner of OBS Browser, click the account name, and select Manage Accounts, which is displayed in Figure 2-2. Figure 2-2 Clicking Manage Accounts Step 3 Step 4 In the Manage Accounts dialog box that is displayed, click Add Account. In the Add Account dialog box, enter the account information and click OK, as shown in Figure 2-3. Figure 2-3 Adding an OBS account 10

16 2 Getting Started The account information includes the following parameters: Account Name The account name is used only to uniquely identify an account and can be different from the OBS account registered with the cloud services. The account name cannot exceed 50 characters. Storage Type Select OBS to connect OBS Browser. AK and SK Enter the AK and SK created in My Credential after you register with a storage service, such as OBS. For details about how to obtain an AK and SK, see section 2.7 Creating Access Keys (AKs and SKs). Remember my secret access key is selected by default. If you do not select Remember my secret access key, you must configure SK each time you log in to OBS Browser. Information about the new account is displayed in the Manage Accounts dialog box. Step 5 Step 6 Click OK. You can log in to OBS Browser using the account and check bucket and object resources owned by the account. Optional: To manage objects owned by multiple accounts on OBS Browser, click the account name and Manage Accounts to add multiple accounts. You can click a desired account to switch to the account. 2.9 Creating a Bucket On OBS, buckets are containers where objects are stored. Before you store data in OBS, you need to create buckets. Procedure NOTE An account can create a maximum of 100 buckets on OBS. Step 2 Step 3 Log in to OBS Browser. In the upper left corner on the page, click Add Bucket. In the Add Bucket dialog box, displayed in Figure 2-4, enter the bucket information as required. 11

17 2 Getting Started Figure 2-4 Add a Bucket Table 2-3 Creating a Bucket Parameter Region Storage Class Bucket Name Description Region where the bucket to be created is located. OBS has the following storage classes: Standard, Infrequent Access, and Archive. In such a manner, OBS comprehensively meets customers' requirements on storage performance and costs. Standard: features low access latency and high throughput. Infrequent Access: applicable to storing semi-frequently accessed (less than 12 times a year) data requiring quick response. Archive: applicable to archiving rarely-accessed (once a year) data. Name of the bucket to be created. The bucket name must be globally unique and comply with the following rules: Must contains 3 to 63 characters, including lowercase letters, digits, hyphens (-), and periods (.) Cannot be an IP address Cannot start or end with a hyphen (-) or period (.) Cannot contain two consecutive periods (.), for example, my..bucket. Cannot contain periods (.) and hyphens (-) adjacent to each other, for example, my-.bucket or my.-bucket. Once you create a bucket, you cannot change the name of it. Make sure that the bucket name you set is appropriate. 12

18 2 Getting Started You can move the pointer over rules for a bucket. behind the Bucket Name text box to view the naming NOTE When a URL is used to access a bucket, the bucket name will become a part of the URL. According to the DNS rule, URLs do not support uppercase letters and cannot be used to access a bucket whose name contains uppercase letters. Therefore, a bucket name can contain only lowercase letters, digits, hyphens (-), and periods (.) For example, if you attempt to access bucket MyBucket using the URL, bucket mybucket will be accessed instead, causing an access error. DNS naming can standardize the bucket naming globally, facilitating the resolution when accessing a bucket. Users can benefit from new functions and optimized features, and static website hosting is then applicable to buckets. Step 4 In the dialog box that is displayed, click OK. NOTE In a multi-region scenario, if you create a bucket in a region, delete it from the region later, and immediately create a bucket with the same name in another region, the system will show a message stating that the bucket failed to be created. In this case, wait one hour and create a bucket with the same name again. Then, the system will show a message stating that the bucket has been successfully created. Region Information Configuration The Region information can be configured on OBS Browser. The following details the configuration procedure: 1. Open file region in folder OBS Browser in the decompression path of OBS Browser. 2. Change the value of parameter options in file region. Enter the region information to be added to the end of parameter options in the following format: {"key":"region alias","value":"region"} The newly added information must be in the JSON format. The following describes the parameters. key: indicates a user-defined region alias. Its value is in the Region drop-down list in the Add Bucket dialog box. For a convenient view, you are advised to enter not more than 25 characters. value: indicates Region. Enter its value based on Region supported by OBS. Each time when a Region is added, a group of values will be added to options, that is, {"key":"region alias","value":"region"}. Groups of values are separated by commas (,). The following provides two configuration examples of newly added region01 and region02. Keep the values of other parameters in file region unchanged. "options":[{"key":"test_region01","value":"region01"}, {"key":"test_region02","value":"region02"}] 3. After file region is successfully modified, restart OBS Browser so that the configurations can take effect. 13

19 2 Getting Started 2.10 Creating a Folder Context Procedure There are no files or folders on OBS Browser. For easy data management, OBS simulate virtual folders by adding a slash (/) to the object name on OBS Browser. Step 2 Step 3 Log in to OBS Browser. Click the bucket in which you want to create a folder. Click Create Folder. In the dialog box that is displayed, enter a folder name and click OK. The folder name cannot contain special characters, such as \/:*?"<>. The folder name cannot start or end with a period (.). The folder name cannot exceed 1023 bytes. The length of a folder name is the sum of the length of its own and the length of its upper-level directories, and cannot exceed 1023 bytes. Levels of directories are automatically separated by slashes (/). For example, if the upper-level directory of folder01 is folder02, the file name length is 18 as calculated based on folder02/folder01/. NOTE If an access denial message is displayed when you are creating a folder, the possible causes are as follows: The access permission for the bucket is restricted by the ACL. For example, the user has no write permission for the bucket. The access permission for the bucket is restricted by the bucket policy. For example, it is forbidden for users to write data to the bucket during the current period of time, the user has no write permission for the bucket, or server-side encryption is not enabled on OBS Browser, which is against the bucket policy. Consequently, when the message is displayed, check ACL settings and bucket policy settings to resolve the problem. Step 4 Click OK Uploading a File or Folder Context Files are uploaded in multiparts on OBS Browser. You can upload a single file up to 48.8 TB in multiparts. The file or folder name cannot exceed 1023 bytes. The length of a file or folder name is the sum of the length of its own and the length of its upper-level directories, and cannot exceed 1023 bytes. Levels of directories are automatically separated by slashes (/). For example, if the upper-level directory of file01 is folder01, the file name length is 15 as calculated based on folder01/file01. 14

20 2 Getting Started OBS Browser supports resumable transfer. If an upload task is suspended or fails, restart the task. According to the part information recorded in the task, the successfully uploaded parts will not be uploaded again, and other parts will be uploaded. Procedure Step 2 Step 3 Log in to OBS Browser. Click the bucket to which you want to upload files or folders. Click Upload. Then click Upload File or Upload Folder. If you use the Upload File function, it is a good practice to upload a maximum of 100 files at a time. If you need to upload more files, place the files in a folder and use the Upload Folder function to upload the folder. NOTE 1. If a message stating "Service Unavailable" is displayed when files are being uploaded, try again later. 2. If an access denial message is displayed when you are uploading a file or folder, the possible causes are as follows: The access permission for the bucket is restricted by the ACL. For example, the user has no write permission for the bucket. The access permission for the bucket is restricted by the bucket policy. For example, it is forbidden for users to write data to the bucket during the current period of time, the user has no write permission for the bucket, or server-side encryption is not enabled on OBS Browser, which is against the bucket policy. Consequently, when the message is displayed, check ACL settings and bucket policy settings to resolve the problem. Step 4 In the dialog box that is displayed, select the file or folder that you want to upload. You can upload a folder or multiple files at a time. To upload multiple files, hold down Ctrl or Shift to select multiple files. You can also select all the files on the current page by holding down Ctrl+A. The operations are consistent with those on the Windows operating system. The file or folder upload progress is displayed on the task management page. You can suspend, run, or cancel an upload task based on site requirements. For details, see section 14.1 Managing Upload Tasks. Step 5 Step 6 Optional: Select a storage class. If no storage class is selected, the bucket storage class will be used by default. Click OK Downloading a File or Folder Procedure This section describes how to download a file or folder from OBS to a local computer. Step 2 Log in to OBS Browser. Click the bucket from which you want to download a file or folder. Then select a file or folder and click Download. 15

21 2 Getting Started You can hold down Ctrl or Shift to select files or folders and batch download them. You can also select all the files or folders on the current page by pressing Ctrl+A. The operations are consistent with those on the Windows operating system. NOTE Before downloading Archive files, ensure that they are in the Restored state. For details, see section 6.7 Restoring an Archive File on OBS. Step 3 In the dialog box that is displayed, select a path to save the file or folder and click OK. If name-sake files exist in the target path, a message will be displayed indicating "Files with the same name exist in the target path. Select the saving method." You can choose to "Keep All" or "Overwrite". The file or folder download progress is displayed on the task management page. You can suspend, delete, or cancel a download task based on site requirements. For details, see section 14.2 Managing Download Tasks Deleting a File or Folder Context Procedure Deleting a folder will delete all files in the folder. Ensure that all files in a folder are not needed before deleting the folder. Deleting unnecessary or unwanted files or folders saves space and costs. You can use the lifecycle management function to implement periodic deletion of unneeded files or batch delete all files or folders in OBS. For details, see section 8.2 Configuring a Lifecycle Rule. Step 2 Log in to OBS Browser. Select the target object and choose More > Delete on the right. You can hold down Ctrl or Shift to select multiple files or folders and batch delete them. You can also select all the files or folders on the current page by pressing Ctrl+A. The operations are consistent with those on the Windows operating system. Step 3 Click OK. The file or folder deletion progress is displayed on the task management page. You can suspend or cancel a deletion task based on site requirements. For details, see section 14.3 Managing Deletion Tasks. 16

22 2 Getting Started 2.14 Deleting a Bucket Prerequisites All objects in the bucket have been deleted. This operation is being performed only by the bucket owner. Procedure Step 2 Log in to OBS Browser. Click the blank area in the row of the bucket and choose More > Delete. NOTE The interval between deleting a bucket and creating another bucket with the same name as the deleted bucket varies in different application scenarios. Step 3 Click OK. 17

23 3 Related Operations 3 Related Operations 3.1 Configuring the System Procedure This section describes how to modify system configurations. Log in to OBS Browser. Step 2 In the upper right corner of OBS Browser, click and click System Configuration. The System Configuration dialog box is displayed, as shown in Figure

24 3 Related Operations Figure 3-1 Configuring the system Step 3 In the System Configuration dialog box, modify parameters on the General tab page. Table 3-1 describes the parameters that can be modified. Table 3-1 General configurations on OBS Browser Parameter Enable HTTPS Enable certificate verification Enable KMS encryption Enable MD5 verification Description When this option is selected, all communication information is encrypted and transferred to OBS over HTTPS. When this option is selected, the client will verify the server certificate. When Enable HTTPS and Enable KMS encryption are selected, KMS encryption will be implemented for all objects uploaded to OBS. When this option is selected, MD5 verification will be performed during the file upload and download on the client. 19

25 3 Related Operations Parameter Multipart Upload, Part Size (MB) Max Number of Upload Tasks Max Number of Download Tasks Language Description Objects whose size is larger than the specified part size (5 MB by default) are segmented and uploaded in the OBS background. The size of each segment can be set in this dialog box. The value of Part Size (MB) can range from 5 MB to 5 GB. This item is selected by default. NOTE Multipart upload is used by default. Recommended settings of Part Size (MB) are as follows: To maximize client performance, set Part Size (MB) based on the upload speed. The optimal Part Size (MB) is larger than the maximum upload speed. For example, if the maximum upload speed is 10 MB/s, set Part Size (MB) to an integer greater than 10 MB. It is recommended that the part size be set to a value two to three times the maximum upload speed. Specifies the maximum number of upload tasks. Enter an integer ranging from 2 to 20. Specifies the maximum number of download tasks. Enter an integer ranging from 5 to 50. Selects the language of the display. Changes take effect after the software is restarted. Step 4 Optional: Click Network and add proxy server information, as shown in Figure 3-2. Figure 3-2 Network configurations 20

26 3 Related Operations Table 3-2 Network configurations on OBS Browser Parameter Enable proxy Description If this option is selected, the Authentication option is displayed. Set the following parameters to access OBS through the proxy server: Address: domain name or IP address of the proxy server Port: port of the proxy server (default port is 8080) Step 5 Optional: Click Other and add other configuration information, as shown in Figure 3-3. Figure 3-3 Other configurations Table 3-3 Other configurations of OBS Browser Parameter Enable automatic update check Join in the user experience improvement project Description If this option is selected, each time when you log in to OBS Browser, a check will be automatically performed to determine whether the current software version is the latest. Before selecting Join in the user experience improvement project, click View details and carefully read User experience improvement project. 21

27 3 Related Operations Parameter Number of Objects Displayed on Each Page Description Sets the number of objects that are displayed on each page. The default value is 100. The value ranges from 50 to 300. After setting the value, click the button in the upper right corner of the page so that the setting takes effect. Task Count in Task List Sets the number of tasks that are displayed in the task list. The default value is 100. The value ranges from 50 to 150. After setting the value, click the button in the upper right corner of the page so that the setting takes effect. NOTE Tasks in the task list are displayed on only one page. If the actual number of tasks exceeds that you set to display, the exceeding tasks are not displayed in the task list. However, the task list updates in real time to display unfinished tasks. Step 6 Click Save to save the system configuration. 3.2 Managing Accounts Add an Account This section describes how to manage multiple accounts on OBS Browser. OBS Browser supports a maximum of ten accounts. Step 2 Log in to OBS Browser. In the upper right corner of OBS Browser, click the account name, and select Manage Accounts, which is displayed in Figure 3-4. Figure 3-4 Clicking Manage Accounts 22

28 3 Related Operations Step 3 Step 4 In the Manage Accounts dialog box that is displayed, click Add Account. In the Add Account dialog box, enter the account information. The account information includes the following parameters: Account Name The account name is used only to uniquely identify an account and can be different from the OBS account registered with the cloud services. The account name cannot exceed 50 characters. Storage Type Select OBS to connect OBS Browser. AK and SK Enter the AK and SK created in My Credential after you register with a storage service, such as OBS. For details about how to obtain an AK and SK, see section 2.7 Creating Access Keys (AKs and SKs). Remember my secret access key is selected by default. If you do not select Remember my secret access key, you must configure SK each time you log in to OBS Browser. Step 5 Click OK. After saving the account information, you can click the account name in the upper corner of the page and the newly added account is displayed in the account name drop-down list. You can click the desired account to switch to from the current login account. Modifying an Account Step 2 Log in to OBS Browser. In the upper right corner of OBS Browser, click the account name, and select Manage Accounts, which is displayed in Figure 3-5. Figure 3-5 Clicking Manage Accounts Step 3 Step 4 Step 5 Click Edit in the row where the desired account resides. Modify the account information as required. Click OK to save the modification. 23

29 3 Related Operations Deleting an Account Step 2 Log in to OBS Browser. In the upper right corner of OBS Browser, click the account name, and select Manage Accounts, which is displayed in Figure 3-6. Figure 3-6 Clicking Manage Accounts Step 3 Step 4 Click Delete in the row where the desired account resides. Click OK and the account is deleted. 3.3 Updating OBS Browser This section describes how to update OBS Browser. Procedure Every time you log in to OBS Browser, the system automatically checks for update by default. If the current version is not the latest, upgrade the software as instructed. If you log in to OBS Browser, click in the upper corner of the page, select System Configuration, click Other in the System Configuration dialog box that is displayed, and deselect Automatic Update Check. Manually upgrade OBS Browser as follows: Log in to OBS Browser. Step 2 In the upper right corner, click and select Check for Update. Step 3 Update the OBS Browser version as instructed. Click on OBS Browser. Then click Check for Update. If It is already the latest version is displayed, the upgrade is successful. 24

30 3 Related Operations 3.4 Feedback Context Procedure This section describes how to feed back your comments or suggestions on OBS using OBS Browser. Statistics on user comments and suggestions as well as function usage must be collected and analyzed to continuously improve operation experience and product performance, boosting customer satisfaction. Log in to OBS Browser. Step 2 In the upper right corner of OBS Browser, click. Then click Feedback, as shown in Figure 3-7. Figure 3-7 What Happened Step 3 In the dialog box that is displayed, enter the problems that you encounter and suggestions, your address, and phone number. Your contact information is used for us to reach you quickly. Your personal data will be anonymized, encrypted, and sent to our company for us to improve our products and services. 25

31 3 Related Operations The data will neither be disclosed or shared, nor be used for other products. You can capture screenshots of problems you encounter during OBS Browser usage and send them to us. 26

32 4 Storage Classes 4 Storage Classes OBS storage classes (Standard, Infrequent Access, and Archive) are designed to comprehensively meet customers' varying requirements on storage performance and costs. This section describes storage classes and how to configure them. OBS supports bucket and object storage classes. 4.1 Storage Classes Overview Different storage classes meet different needs for storage performance and costs. OBS Standard features low access latency and high throughput. It is applicable to storing frequently accessed (multiple times per month) hot or small files (< 1 MB) that require quick response. The application scenarios include big data, mobile applications, hot videos, and social media images. OBS Infrequent Access is applicable to storing semi-frequently accessed (less than 12 times a year) data requiring quick response. The application scenarios include file synchronization or sharing, and enterprise-level backup. It provides the same durability, access latency, and throughput as OBS Standard but at a lower price. However, OBS Infrequent Access has lower availability than OBS Standard. OBS Archive is applicable to archiving rarely-accessed (averagely once a year) data. The application scenarios include data archiving and long-term data retention for backup. OBS Archive is secure, durable, and inexpensive, which can replace tape libraries. However, it can take up to hours to restore data from OBS Archive. You can change the storage class of an object in the object list, or you can transition the object storage class by using the lifecycle rule. Because the implementation principles of the two methods are different, the charging is different. Details about the differences between the two methods are as follows: In the object list, changing storage class of an object is implemented by copying the object and assigning the new object with the specified storage class. When the versioning function is disabled or suspended, the new object will overwrite the original object. After the storage class is changed successfully, the new object will be in the newly specified storage class and its last modification time will change. However, the number of objects in the bucket and the used storage space remain unchanged, and no additional storage cost is incurred. When the versioning function is enabled and you change the storage class of an object in the object list, the new object will be saved as a different version of the original object. Therefore, the new object does not overwrite the original object. 27

33 4 Storage Classes After the storage class is changed successfully, two versions of the object are saved in OBS. The storage class of the original object remains unchanged, and the newly specified storage class applies only to the new version of the object. As a result the number of objects in the bucket and the used storage space will increase, incurring extra storage cost. The lifecycle rule alters the object attribute in the system instead of generating a new object, meaning the transition between storage classes is not subject to the versioning function. After the storage class is transitioned successfully, the last modification time of the object will not be altered. Such transition will not result in the increase of objects nor storage space. Therefore, no extra cost will be incurred. 4.2 Application Scenarios Table 4-1 Application scenarios Storage Class Standard Infrequen t Access Archive Application Scenario Big data analysis Cloud-native application program data Static website hosting Backup/Active archive Other service scenarios Deep/Cold archive Description Data, including files, images, and videos, of big data applications (such as gene, financing, meteorology, and advertising) can be directly stored to OBS through the Internet. OBS provides high-performance and high-availability storage services. In this manner, users can easily use affordable and efficient storage services for their mobile and Internet applications. In addition, OBS enables users to access data of any size on OBS from anywhere. Website operators or personal website publishers employ OBS as static website hosting resource pools and set website functions to host entire static websites after uploading static web pages into OBS and to quickly deliver data through Content Delivery Network (CDN). OBS is a durable, expandable, and secure solution for backing up and archiving users' key data. Its versioning function further protects data. Its high-durability and secure infrastructure aims to provide an advanced data protection and disaster recovery solution. Additionally, OBS supports third-party backup and archive software, such as Commvault and NetBackup. OBS can be used as storage resource pools or backup storage of other services, including Image Management Service (IMS), Volume Backup Service (VBS), and Relational Database Service (RDS). Data that requires long-term retention for backup (months to years) and is insensitive to restoration latency ( 12 hours) can use OBS Archive as its archive storage. 28

34 5 Managing Buckets 5 Managing Buckets This chapter describes a series of bucket management operations. OBS Browser supports three methods of bucket management. This document takes the first method as an example to describe bucket management operations. 1. Click the blank area in the row where the bucket to be managed resides. You can manage the bucket using the buttons displayed above the bucket list, as shown in Figure 5-1. Figure 5-1 First method 2. Click the operation buttons in the row of the bucket to be managed, as shown in Figure 5-2. Figure 5-2 Second method 3. Right-click the blank area in the row where the bucket to be managed resides. A shortcut menu is displayed for managing the bucket, as shown in Figure

35 5 Managing Buckets Figure 5-3 Third method 5.1 Creating a Bucket On OBS, buckets are containers where objects are stored. Before you store data in OBS, you need to create buckets. Procedure NOTE An account can create a maximum of 100 buckets on OBS. Step 2 Step 3 Log in to OBS Browser. In the upper left corner on the page, click Add Bucket. In the Add Bucket dialog box, displayed in Figure 5-4, enter the bucket information as required. 30

36 5 Managing Buckets Figure 5-4 Add a Bucket Table 5-1 Creating a Bucket Parameter Region Storage Class Bucket Name Description Region where the bucket to be created is located. OBS has the following storage classes: Standard, Infrequent Access, and Archive. In such a manner, OBS comprehensively meets customers' requirements on storage performance and costs. Standard: features low access latency and high throughput. Infrequent Access: applicable to storing semi-frequently accessed (less than 12 times a year) data requiring quick response. Archive: applicable to archiving rarely-accessed (once a year) data. Name of the bucket to be created. The bucket name must be globally unique and comply with the following rules: Must contains 3 to 63 characters, including lowercase letters, digits, hyphens (-), and periods (.) Cannot be an IP address Cannot start or end with a hyphen (-) or period (.) Cannot contain two consecutive periods (.), for example, my..bucket. Cannot contain periods (.) and hyphens (-) adjacent to each other, for example, my-.bucket or my.-bucket. Once you create a bucket, you cannot change the name of it. Make sure that the bucket name you set is appropriate. 31

37 5 Managing Buckets You can move the pointer over rules for a bucket. behind the Bucket Name text box to view the naming NOTE When a URL is used to access a bucket, the bucket name will become a part of the URL. According to the DNS rule, URLs do not support uppercase letters and cannot be used to access a bucket whose name contains uppercase letters. Therefore, a bucket name can contain only lowercase letters, digits, hyphens (-), and periods (.) For example, if you attempt to access bucket MyBucket using the URL, bucket mybucket will be accessed instead, causing an access error. DNS naming can standardize the bucket naming globally, facilitating the resolution when accessing a bucket. Users can benefit from new functions and optimized features, and static website hosting is then applicable to buckets. Step 4 In the dialog box that is displayed, click OK. NOTE In a multi-region scenario, if you create a bucket in a region, delete it from the region later, and immediately create a bucket with the same name in another region, the system will show a message stating that the bucket failed to be created. In this case, wait one hour and create a bucket with the same name again. Then, the system will show a message stating that the bucket has been successfully created. Region Information Configuration The Region information can be configured on OBS Browser. The following details the configuration procedure: 1. Open file region in folder OBS Browser in the decompression path of OBS Browser. 2. Change the value of parameter options in file region. Enter the region information to be added to the end of parameter options in the following format: {"key":"region alias","value":"region"} The newly added information must be in the JSON format. The following describes the parameters. key: indicates a user-defined region alias. Its value is in the Region drop-down list in the Add Bucket dialog box. For a convenient view, you are advised to enter not more than 25 characters. value: indicates Region. Enter its value based on Region supported by OBS. Each time when a Region is added, a group of values will be added to options, that is, {"key":"region alias","value":"region"}. Groups of values are separated by commas (,). The following provides two configuration examples of newly added region01 and region02. Keep the values of other parameters in file region unchanged. "options":[{"key":"test_region01","value":"region01"}, {"key":"test_region02","value":"region02"}] 3. After file region is successfully modified, restart OBS Browser so that the configurations can take effect. 32

38 5 Managing Buckets Follow-up Procedure You can specify its storage class when creating a bucket or change its storage class after bucket creation. Log in to OBS Browser. Step 2 In the bucket list, select the target bucket and click on the right. Step 3 Select the desired storage class and click OK. On the upper part of the page, a message is displayed indicating an operation success. Changing the storage class of a bucket does not change the storage class of any object in the bucket. 5.2 Searching for a Bucket Procedure This section describes how to search for a bucket by entering characters contained in its name on OBS Browser. Step 2 Log in to OBS Browser. In the search box in the upper right corner on the main page, enter characters contained in the name of the desired bucket. Step 3 Click. The found buckets are displayed in the bucket list. If you want to search for another bucket, click to delete the keyword you entered and enter a bucket name again. If you want to quickly switch to another bucket on the object list page, you can click on the left side to expand the hidden bucket list and search for the desired bucket in the search box above the bucket list. For example, if you want to search for buckets whose names contain the test characters, you only need to enter test in the search box in the upper right corner on the main page and click. Then, all buckets that contain test in their names are displayed in the bucket list. 5.3 Viewing Basic Information About a Bucket This section describes how to view basic information about a bucket, including the owner, capacity, location, and object quantity using OBS Browser. 33

39 5 Managing Buckets Procedure Step 2 Step 3 Log in to OBS Browser. Click the blank area in the row of the bucket about which you want to query the basic information and click Basic. On the Basic page displayed as Figure 5-5, view basic information about the bucket. Figure 5-5 Basic information about the bucket Table 5-2 Parameter description Parameter Description Bucket Name - Region Storage Class Space Used Number of Objects Region where the bucket is stored. Storage class of a bucket, The value can be Standard, Infrequent Access, or Archive. Total capacity used by objects in the bucket. Indicates the number of objects stored in the bucket. The number of objects is the sum of current object version and historical object versions. 34

40 5 Managing Buckets Parameter Owner Account ID Created Description Bucket creator or any other user in the same account as the bucket creator. Unique identity of the bucket owner. It is the same as Account ID on the My Credential page. Time when the creation of a bucket is completed. 5.4 Fragments Management Context The following lists examples of situations where fragments may be generated due to data upload failures. The network is in poor condition, and the connection to the OBS server is interrupted frequently. The upload task is manually interrupted. The device is faulty. The device is powered off suddenly. For OBS Browser, if a file fails to be uploaded or the upload task is suspended, fragments are generated and stored in OBS. You can resume the upload through task management. After the resumable upload completes, the fragments will be cleared automatically. You can also manually clear fragments using the fragment management function. If you resume an upload task after clearing the fragments, the upload progress will be lost and the task needs to be re-uploaded. NOTICE The fragment storage in OBS is charged. Procedure Step 2 Log in to OBS Browser. Click the blank area in the row of the bucket and choose More > Manage Fragments, as shown in Figure

41 5 Managing Buckets Figure 5-6 Choosing Manage Fragments Step 3 In the Manage Fragments dialog box, select a fragment and click. You can click Clear above the object list to delete all the fragments. Click Check to refresh the fragment list. Step 4 Step 5 In the Warning dialog box that is displayed, confirm upload task information and click OK. Click OK. The Manage Fragments dialog box is displayed. You can close the dialog box to return to the OBS Browser home page. 5.5 Deleting a Bucket This section describes how to delete a bucket. Prerequisites All objects in the bucket have been deleted. This operation is being performed only by the bucket owner. Procedure Step 2 Log in to OBS Browser. Click the blank area in the row of the bucket and choose More > Delete. NOTE The interval between deleting a bucket and creating another bucket with the same name as the deleted bucket varies in different application scenarios. Step 3 Click OK. 36

42 6 Managing Objects 6 Managing Objects Objects are basic data units that users operate in OBS. This chapter describes a series of object management operations. Right-click the blank area in the object list and a shortcut menu is displayed. You can choose Upload File, Upload Folder, or Create Folder to manage objects. OBS Browser supports three methods of object management. This document takes the first method as an example to describe object management operations. 1. Click the blank area in the row where the object to be managed resides. You can manage the object using the buttons displayed in the upper part, as shown in Figure 6-1. Figure 6-1 First method 2. Click the operation buttons in the row of the object to be managed. These options are highlighted Figure 6-2. Figure 6-2 Second method 3. Right-click the blank area in the row where the object to be managed resides. A shortcut menu is displayed for managing the object, as shown in Figure

43 6 Managing Objects Figure 6-3 Third method 6.1 Creating a Folder Context Procedure This section describes how to create a folder using OBS Browser. There are no files or folders on OBS Browser. For easy data management, OBS simulate virtual folders by adding a slash (/) to the object name on OBS Browser. Step 2 Step 3 Log in to OBS Browser. Click the bucket in which you want to create a folder. Click Create Folder. In the dialog box that is displayed, enter a folder name and click OK. The folder name cannot contain special characters, such as \/:*?"<>. The folder name cannot start or end with a period (.). The folder name cannot exceed 1023 bytes. The length of a folder name is the sum of the length of its own and the length of its upper-level directories, and cannot exceed 1023 bytes. Levels of directories are automatically separated by slashes (/). For example, if the upper-level directory of folder01 is folder02, the file name length is 18 as calculated based on folder02/folder01/. NOTE If an access denial message is displayed when you are creating a folder, the possible causes are as follows: The access permission for the bucket is restricted by the ACL. For example, the user has no write permission for the bucket. The access permission for the bucket is restricted by the bucket policy. For example, it is forbidden for users to write data to the bucket during the current period of time, the user has no write permission for the bucket, or server-side encryption is not enabled on OBS Browser, which is against the bucket policy. Consequently, when the message is displayed, check ACL settings and bucket policy settings to resolve the problem. Step 4 Click OK. 38

44 6 Managing Objects 6.2 Accessing an Object Using Its Object URL The object uniform resource locator (URL) function, also known as object sharing function, allows anonymous users to access object data using object URLs. Prerequisites Assign an anonymous user the permission to read the specified object using OBS Console. For details about how to assign object ACL permissions to accounts, see Setting ACL Permissions for Objects in the Object Storage Service Console Operation Guide. Procedure Log in to OBS Browser. Step 2 Click the bucket for which you want to configure the object URL function, and click next to the object to be shared. This will display the object URL, which is highlighted in Figure 6-4. If you select OBS when logging in to OBS Browser, the object URL is in the format of name.domain name/directory level/object name. If the object is in the root directory of the bucket, the URL does not contain a directory level. Figure 6-4 Object properties Step 3 Click Copy to copy the object URL to the browser. Then you can access the object. NOTE To allow Anonymous User to access objects whose storage class are Archive using the URL, ensure that the objects are in the Restored state. The method of using a browser to access objects varies depending on the object type. You can directly open.txt and.html files using a browser. However, when you open.exe and.dat files using a browser, the files are automatically downloaded to your local computer. 6.3 Searching for a File or Folder This section describes how to search for a file or folder by name prefix on OBS Browser. 39

45 6 Managing Objects Procedure Step 2 Step 3 Log in to OBS Browser. Click the bucket where the target file or folder resides. In the search box in the upper right corner on the object management page that is displayed, enter the name prefix of the desired file or folder. Step 4 Click. The found files or folders are displayed in the object list. If you want to search for other files or folders, click in the search box to delete the keyword and enter the characters contained in the names of the files or folders for which you want to search. For example, if you want to search for files or folders whose name prefix is testobject in bucket mybucket, go to the object management page, enter testobject in the search box in the upper right corner on the page, and click testobject are displayed in the object list.. All files or folders whose name prefix is 6.4 Uploading a File or Folder Context Procedure You can upload local files or folders to OBS. Files are uploaded in multiparts on OBS Browser. You can upload a single file up to 48.8 TB in multiparts. The file or folder name cannot exceed 1023 bytes. The length of a file or folder name is the sum of the length of its own and the length of its upper-level directories, and cannot exceed 1023 bytes. Levels of directories are automatically separated by slashes (/). For example, if the upper-level directory of file01 is folder01, the file name length is 15 as calculated based on folder01/file01. OBS Browser supports resumable transfer. If an upload task is suspended or fails, restart the task. According to the part information recorded in the task, the successfully uploaded parts will not be uploaded again, and other parts will be uploaded. Step 2 Step 3 Log in to OBS Browser. Click the bucket to which you want to upload files or folders. Click Upload. Then click Upload File or Upload Folder. If you use the Upload File function, it is a good practice to upload a maximum of 100 files at a time. If you need to upload more files, place the files in a folder and use the Upload Folder function to upload the folder. 40

46 6 Managing Objects NOTE 1. If a message stating "Service Unavailable" is displayed when files are being uploaded, try again later. 2. If an access denial message is displayed when you are uploading a file or folder, the possible causes are as follows: The access permission for the bucket is restricted by the ACL. For example, the user has no write permission for the bucket. The access permission for the bucket is restricted by the bucket policy. For example, it is forbidden for users to write data to the bucket during the current period of time, the user has no write permission for the bucket, or server-side encryption is not enabled on OBS Browser, which is against the bucket policy. Consequently, when the message is displayed, check ACL settings and bucket policy settings to resolve the problem. Step 4 In the dialog box that is displayed, select the file or folder that you want to upload. You can upload a folder or multiple files at a time. To upload multiple files, hold down Ctrl or Shift to select multiple files. You can also select all the files on the current page by holding down Ctrl+A. The operations are consistent with those on the Windows operating system. The file or folder upload progress is displayed on the task management page. You can suspend, run, or cancel an upload task based on site requirements. For details, see section 14.1 Managing Upload Tasks. Step 5 Step 6 Optional: Select a storage class. If no storage class is selected, the bucket storage class will be used by default. Click OK. Follow-up Procedure You can modify the storage class of the object after uploading the file or folder. Step 2 Step 3 Step 4 Log in to OBS Browser. In the bucket list, click the bucket name. Select the target object and choose More > Change Storage Class on the right. Select the desired storage class and click OK. Pay attention to the following restrictions when you modify the storage class of the object: Objects can be changed from the Standard storage class to Infrequent Access or Archive; from the Infrequent Access storage class to Standard or Archive; from Archive to Standard or Infrequent Access but must the objects of Archive storage must be restored first. The latter two changes incur penalty and restoration fees. Determine an appropriate change path based on your actual needs. You can also configure a lifecycle rule to transition the storage class of an object. For details, see 8 Lifecycle Management. See 4.1 Storage Classes Overview for details about differences between changing storage classes in the object list and transitioning storage classes through the lifecycle rule. 41

47 6 Managing Objects 6.5 Downloading a File or Folder Procedure This section describes how to download a file or folder from OBS to a local computer. Step 2 Log in to OBS Browser. Click the bucket from which you want to download a file or folder. Then select a file or folder and click Download. You can hold down Ctrl or Shift to select files or folders and batch download them. You can also select all the files or folders on the current page by pressing Ctrl+A. The operations are consistent with those on the Windows operating system. NOTE Before downloading Archive files, ensure that they are in the Restored state. For details, see section 6.7 Restoring an Archive File on OBS. Step 3 In the dialog box that is displayed, select a path to save the file or folder and click OK. If name-sake files exist in the target path, a message will be displayed indicating "Files with the same name exist in the target path. Select the saving method." You can choose to "Keep All" or "Overwrite". The file or folder download progress is displayed on the task management page. You can suspend, delete, or cancel a download task based on site requirements. For details, see section 14.2 Managing Download Tasks. 6.6 Deleting a File or Folder Context Procedure This section describes how to delete a file or folder. Deleting a folder will delete all files in the folder. Ensure that all files in a folder are not needed before deleting the folder. Deleting unnecessary or unwanted files or folders saves space and costs. You can use the lifecycle management function to implement periodic deletion of unneeded files or batch delete all files or folders in OBS. For details, see section 8.2 Configuring a Lifecycle Rule. Step 2 Log in to OBS Browser. Select the target object and choose More > Delete on the right. 42

48 6 Managing Objects You can hold down Ctrl or Shift to select multiple files or folders and batch delete them. You can also select all the files or folders on the current page by pressing Ctrl+A. The operations are consistent with those on the Windows operating system. Step 3 Click OK. The file or folder deletion progress is displayed on the task management page. You can suspend or cancel a deletion task based on site requirements. For details, see section 14.3 Managing Deletion Tasks. 6.7 Restoring an Archive File on OBS You need to restore an Archive object before downloading it. Context OBS Archive is applicable to archiving rarely-accessed (such as once a year) data. The application scenarios include data archiving and long-term data retention for backup. OBS Archive is secure, durable, and inexpensive, which can replace tape libraries. However, it can take up to hours to restore data from OBS Archive. If an Archive object is being restored, you cannot suspend or delete the restoration task. You cannot restore an object that is in the Restoring state. For details about data restoration duration and pricing, see Product Price Details. Procedure Step 2 Log in to OBS Browser. Click the bucket in which the file that you want to restore resides. The object list is displayed. Step 3 Click next to the file that you want to restore. Alternatively, you can select an object and click on the top of the object list. Before restoring objects, you need to configure the validity period and restoration speed of the objects. Table 6-1 describes the parameters. Table 6-1 Parameters for restoring objects Parameter Object name Bucket Description Name of the object to be restored. Bucket where the object to be restored resides. 43

49 6 Managing Objects Parameter Validity Period Speed Description Time duration when an object remains in the Restored state after being restored. The timing starts as the object restoration is completed. The value is an integer ranging from 1 to 30 (days). The default value is 30. For example, you set Validity Period to 20 when restoring an object. After 20 days starting from the time when the object is successfully restored, the object's status will change from Restored to Not restored. Restoration speed of an object. Expedited: Allows you to restore the Archive objects within 1 to 5 minutes Standard: Allows you to restore your Archive objects within 3 to 5 hours. Step 4 Click OK to confirm the restoration of Archive files. Click and the Properties dialog box is displayed, as shown in Figure 6-5. You can view the restoration status. Figure 6-5 Properties of the restored object You can download the file only after its status changes to Restored. You can click the Refresh button in the upper right corner to refresh the restoration tasks and to view the restoration progress. The system also automatically refreshes the restoration tasks every 5 minutes. NOTE The system checks the file restoration status once per day at 00:00 (GMT±00:00). The expiration time is counted starting from the time when the last check was complete. For example, an object was restored at 16:00, on March 7 (GMT+08:00) and it was set to be valid for one day. The system performs the next check at 08:00, on March 8 (GMT+08:00). The object will expire at 08:00, on March 9 (GMT+08:00). 44

50 6 Managing Objects Follow-up Procedure Within the validity period of an object, you can repeatedly restore the object. The validity period of the object is counted starting from the time when the latest restoration is completed. By doing so, you can prolong the validity period of an object. NOTE If an object is to be restored for a second time, the expiration time set for the second restoration must be later than that set for the first restoration. For example, an object is Restored and its expiration time is set to 4/12/ :00:00 GMT+08:00. After the object is restored for the second time, the expiration time must be set to a time point later than 4/12/ :00:00 GMT+08: MD5 Verification Context During file upload and download, the file may be damaged due to network issues. Through MD5 verification, you can verify the correctness of uploaded or downloaded documents. Enabling MD5 verification on OBS Browser will affect upload and download speeds. This section describes the MD5 verification function using file upload as an example. Procedure NOTE MD5 verification is performed only when the file to be downloaded contains MD5 information. Log in to OBS Browser. Step 2 In the upper right corner of OBS Browser, click and click System Configuration. Step 3 Choose System Configuration > Basic Configuration. In the dialog box that is displayed, select Enable MD5 verification, as shown in Figure

51 6 Managing Objects Figure 6-6 System Configuration Step 4 Step 5 Step 6 Step 7 Click Save. Click the bucket to which you want to upload files or folders. Click Upload. Then click Upload File or Upload Folder. In the dialog box that is displayed, select the file or folder that you want to upload. You can upload a folder or multiple files at a time. To upload multiple files, hold down Ctrl or Shift to select multiple files. You can also select all the files on the current page by holding down Ctrl+A. The operations are consistent with those on the Windows operating system. Step 8 In the upper right corner of the page, click. Then in the running task list, you can view the file uploading status and MD5 verification status, as shown in Figure 6-7. Figure 6-7 MD5 verification Step 9 After the file is uploaded, you can view the MD5 verification result in the completed task list, as shown in Figure

52 6 Managing Objects Figure 6-8 MD5 verification 47

53 7 Bucket ACL 7 Bucket ACL Bucket access permissions can be controlled using access control lists (ACLs) or bucket policies. This section describes how to set a bucket ACL. 7.1 Bucket ACL Overview OBS offers account-based ACLs. The bucket owner (which can be the bucket creator or any other user under the same account of the bucket creator) can use ACLs to grant access permissions to other accounts, such as the bucket read, bucket write, ACL read, and ACL write permissions. By default, only the bucket owner can access objects in the bucket. All users under the same account have the same permissions by default. You can also assign different permissions to users under the same account by configuring the bucket policy. A bucket ACL can only authorize permissions to accounts. However, you can use bucket policies to assign permissions to accounts and users under the accounts. OBS can use an ACL to enable bucket access permissions to be assigned to the following types of authorized users, as described in Table 7-1. Table 7-1 Authorized users supported by OBS Authorized User Bucket Owner Anonymous User Registered User Description Bucket creator or any other user under the same account of the bucket creator. The owner of a bucket has the ACL View and ACL Edit permissions permanently by default. A user that is not registered with OBS. If the access permission for a bucket and objects is assigned to an anonymous user, all users can access the bucket and objects. A user that is registered with OBS. For example, a registered user can access OBS Browser using AKs and SKs. 48

54 7 Bucket ACL Authorized User Log Delivery User Description A user that delivers bucket access logs after logging is enabled for a bucket. OBS automatically converts bucket logs into objects following the naming rules and writes the objects into the target bucket. The log delivery user is only available for the log management in OBS. Table 7-2 lists the following types of access permissions that OBS supports. Table 7-2 Access permissions supported by OBS Permission Read Write ACL View ACL Edit Full Control Description A grantee with this permission for a bucket can obtain the list of objects in the bucket and the metadata of the bucket. A grantee with this permission for a bucket can upload, overwrite, and delete any object in the bucket. A grantee with this permission can obtain the ACL of a bucket or object. A bucket or object owner has this permission permanently. A grantee with this permission can update the ACL of a bucket or object. A bucket or object owner has this permission permanently. NOTE A grantee with this permission can modify the access control policy and thus the grantee obtains full access permissions. Exercise caution when assigning this permission to other users. A grantee with this permission for a bucket has Read, Write, ACL View, and ACL Edit permissions for the bucket. NOTE Users assigned the permission can fully control the bucket and its objects. Exercise caution when assigning this permission to other users. NOTE A request supports a maximum of 100 permissions. Granting new permissions for a bucket overwrites the existing permissions for the bucket and no permissions are added for the bucket. 7.2 Setting ACL Permissions for Buckets You can set ACL permissions of the Owner, Anonymous User, Registered User, and Log Delivery User. 49

55 7 Bucket ACL Procedure Step 2 Step 3 Log in to OBS Browser. Click the blank area in the row of the bucket for which you want to set ACL permissions and click Configure Permission. Set ACL permissions for the bucket and click Save. Figure 7-1 displays the Configuration Permission page. Figure 7-1 Configuring permissions 50

56 8 Lifecycle Management 8 Lifecycle Management Lifecycle management means periodically deleting objects in a bucket or modifying object storage classes by configuring rules. This section describes lifecycle management and its configuration methods. 8.1 Lifecycle Management Overview Lifecycle management applies to the following scenarios: Some periodically uploaded files need only to be retained for one week or one month, and can be deleted once they have expired. Documents are seldom accessed after a certain period of time. These files need to be transitioned to Infrequent Access or Archive storage or be deleted. You can define lifecycle rules for identifying objects and manage lifecycles of the objects based on the rules. After unwanted files are deleted, less OBS storage space is required, saving your costs. Objects that are no longer frequently accessed are transitioned to Infrequent Access or Archive, saving you costs. This transition means that the object storage class is altered without copying the object. You can also manually change the storage class of an object on the object page. For details, see 6.4 Uploading a File or Folder. See Object Storage Classes Overview for details about differences between changing storage classes in the object list and transitioning storage classes through the lifecycle rule. Lifecycle rules have two key elements: Configuration policy You can also specify the prefix of object names so that objects whose names have this prefix are restricted by the rules. You can configure a lifecycle rule for a bucket so that all objects in the bucket can be restricted by the lifecycle rule. Time You can specify the number of days after which objects that have been last updated and meet specified conditions are automatically transitioned to Infrequent Access, Archive, or expire and are then automatically deleted. Transition to Infrequent Access: You can specify the number of days after which objects that have been last updated and meet specified conditions are automatically transitioned to Infrequent Access. 51

57 8 Lifecycle Management Transition to Archive: You can specify the number of days after which objects that have been last updated and meet specified conditions are automatically transitioned to Archive. Expiration Time: You can specify the number of days after which objects are automatically deleted or the day after which an object that matches with a rule is deleted. The previous number of days for objects to be transitioned to Infrequent Access is at least 30. If objects are configured able to be transitioned to Infrequent Access and Archive both, the number of days for transition to Archive must be at least 30 greater than that for transition to Infrequent Access. For example, if the number of days for transition to Infrequent Access is 33, that for transition to Archive must be 63 at least. If only transition to Archive is enabled and transition to Infrequent Access is disabled, there is no limit on the number of days for transition. The expiration time must be greater than the two transition times. 8.2 Configuring a Lifecycle Rule Procedure You can configure a lifecycle management rule for a bucket, and applicable objects in the bucket will be managed by the rule. You can transition the storage class of an object from Standard to Infrequency Access or Archive, or from Infrequent Access to Archive. However, an object in the Archive storage class cannot be transitioned to other storage classes by configuring the lifecycle rule. Step 2 Log in to OBS Browser. Click the blank area in the row of the bucket for which you want to configure a lifecycle rule and choose More > Configure Lifecycle Rule, as shown in Figure 8-1. Figure 8-1 Choosing Configure Lifecycle Rule Step 3 In the Configure Lifecycle Rule dialog box, click Add. Figure 8-2 displays the Create Lifecycle Rule dialog box. 52

58 8 Lifecycle Management Figure 8-2 Adding a lifecycle rule Step 4 Select Enable and configure required parameters, and click Save. Status Select Enable to enable the lifecycle rule. Rule Name Identify lifecycle rules. The Rule Name contains a maximum of 255 characters. Applies To: Can be set to Object name prefix or Bucket. : Objects that have the specified prefix will be managed by the lifecycle rule. Object prefix: Objects that have the specified prefix will be managed by the lifecycle rule. Bucket: All objects in the bucket will be managed by the lifecycle rule. Current Version or Historical Version: Transition to Infrequent Access: You can specify the number of days after which objects that have been last updated and meet specified conditions are automatically transitioned to Infrequent Access. This number must be at least 30. Transition to Archive: You can specify the number of days after which objects that have been last updated and meet specified conditions are automatically transitioned to Archive. If objects are configured to be transitioned to both Infrequent Access and Archive, the number of days for transition to Archive must be at least 30 days later than that for transition to Infrequent Access. If only transition to Archive is enabled and transition to Infrequent Access is disabled, there is no limit on the number of days for transition. Expiration Time: You can specify the number of days after which objects that have been last updated and meet specified conditions are automatically deleted. The expiration time must be greater than the two transition times. 53

59 8 Lifecycle Management NOTE Current Version and Historical Version are two concepts for Versioning. If Versioning is enabled, uploading objects with the same name to the same path generates different versions. The object uploaded later is called Current Version, and the object uploaded earlier is called Historical Version. You can configure either, both, or neither of the versions. For example, the following files are stored on OBS on January 7, 2015: log/test1.log log/test2.log doc/example.doc doc/good.txt The following files are stored on OBS on January 10, 2015: log/clientlog.log log/serverlog.log doc/work.doc doc/travel.txt If objects prefixed with log is set to expire in 1 Day on January 10, 2015, OBS will delete objects log/test1.log, log/test2.log, log/clientlog.log, and log/serverlog.log on January 12, On the day of operation, you can set the objects with the name prefix log to be transitioned to Infrequent Access 30 days later, transitioned to Archive 60 days later, and deleted 100 days later, then OBS will transition log/clientlog.log, log/serverlog.log, log/test1.log, and log/test2.log to Infrequent Access on the 31st day, transition them to Archive the 61st day, and delete them on the 101st day, respectively. NOTE The storage class transition and deletion of an object may be delayed after the time condition is met. Generally, the delay does not exceed 48 hours. Step 5 In the Add Lifecycle Rule dialog box, click Save to save the lifecycle rule. Follow-up Procedure You can click Edit or Delete to edit or delete a configured lifecycle rule. 54

60 9 Bucket Policy 9 Bucket Policy Bucket access permissions can be controlled using ACLs or bucket policies. This section describes how to set a bucket policy. 9.1 Bucket Policy Overview A bucket owner (which can be the bucket creator or any other user under the same account of the bucket creator) can edit a bucket policy to set access permissions for the bucket. A bucket policy can centrally control access to the bucket and objects in the bucket, based on different parameters, such as the bucket policy effect and authorized principals. Permissions attached to a bucket apply to all the objects in the bucket. A bucket owner can use one bucket policy to set permissions for any number of objects in the bucket. After a bucket policy is created, access requests to the bucket are controlled by the bucket policy. The bucket policy controls access requests by accepting or rejecting the requests. 9.2 Configuring a Bucket Policy Procedure A bucket policy defines the access control policy of resources (buckets and objects) on OBS. Step 2 Log in to OBS Browser. Click the blank area in the row of the bucket for which you want to configure a bucket policy and choose More > Configure Bucket Policy, as shown in Figure

61 9 Bucket Policy Figure 9-1 Choosing Configure Bucket Policy Step 3 In the Configure Bucket Policy dialog box, enter a bucket policy. The following are two examples of bucket policy configurations. 1. Grant a permission to an OBS account. In the following example, the account (whose Account ID is 783fc6652cf246c096ea836694f71855) is assigned the permission to obtain the log management information about bucket logging.bucket3. Table 9-1 describes an example of parameters that you need to manually modify: Table 9-1 Parameters to be modified Parameter GetBucketLogging Allow logging.bucket3 783fc6652cf246c096ea836694f71855 Description Value of the Action field that indicates the operation set in the policy and performed on the bucket. The Action field indicates all operations supported by OBS and contains a string of caseinsensitive characters. The value supports a wildcard character (*) that indicates all operations. Value of the Effect field that indicates whether the permission in the policy is allowed or denied. The value of the Effect field must be Allow or Deny. Target bucket on which the policy works. The bucket name varies based on actual conditions. Account ID of an account. The Account ID needs to be modified based on actual conditions. You can click after the target bucket to view the Account ID in the Basic dialog box that is displayed. 2. Grant an OBS user a permission. In the following example, the user (whose User ID is 71f e ea2c26d1999) of the account (whose Account ID is 219d520ceac84c5a98b237431a2cf4c2) is assigned the permission to set log management for bucket logging.bucket3. Table 9-2 describes an example of parameters that you need to manually modify: 56

62 9 Bucket Policy Table 9-2 Parameters to be modified Parameter PutBucketLogging Allow logging.bucket3 219d520ceac84c5a98b237431a2cf4c2 Description Value of the Action field that indicates the operation set in the policy and performed on the bucket. The Action field indicates all operations supported by OBS and contains a string of caseinsensitive characters. The value supports a wildcard character (*) that indicates all operations. Value of the Effect field that indicates whether the permission in the policy is allowed or denied. The value of the Effect field must be Allow or Deny. Target bucket on which the policy works. The bucket name varies based on actual conditions. Account ID of an account. The Account ID needs to be modified based on actual conditions. You can click after the target bucket to view the Account ID in the Basic dialog box that is displayed. 71f e ea2c26d1999 User ID of a user. The User ID needs to be modified based on actual conditions. You can click the username in the upper right corner of the page and select Basic Information from the drop-down list. On the displayed page, click Manage my credentials. Then you can see the User ID. Table 9-3 describes the parameters of bucket policies. All fields except the Effect field are optional. Table 9-3 Parameters in bucket policies Parameter Description Mandatory or Not Version The value can be or Optional Id The ID of the bucket policy. The value must be unique. Optional 57

63 9 Bucket Policy Parameter Description Mandatory or Not Statement Effect The description of the bucket policy. The statement defines complete permission control. Each bucket policy can have multiple statements, and each statement contains the following parameters: Sid Effect Principal NotPrincipal Action NotAction Resource NotResource Condition The effect of the bucket policy. The statement can be sent to accept or reject requests. Possible values are Allow and Deny. Mandatory Mandatory Sid The statement ID. Optional Principal/ NotPrincipa l Action/ NotAction Resource/ NotResourc e The user on whom the bucket policy statement takes effect. Either Principal or NotPrincipal must be selected to specify the user on whom the bucket policy statement takes effect or does not take effect. The OBS operation on which the bucket policy statement takes effect. Either Action or NotAction must be selected to specify whether the bucket policy statement takes effect on the OBS operation. The object on which the bucket policy statement takes effect. Either Resource or NotResource must be selected to specify whether the bucket policy statement takes effect on the OBS resources. Mandatory Mandatory Mandatory Condition Indicates the conditions for a statement to take effect. Optional 58

64 10 CORS 10 CORS CORS is a browser standard mechanism provided by the World Wide Web Consortium (W3C). It defines the interaction methods between client-side web applications in one origin and resources in another origin. In web page requests, website scripts and contents in one origin cannot interact with those in another origin because of Same Origin Policies (SOPs). This section introduces CORS and describes how to configure CORS CORS Overview OBS supports CORS rules and allows resources on OBS to be accessed across origins. OBS CORS is used in the following scenarios: Enables JavaScript and HTML5 to be used for establishing web applications that can directly access resources on OBS. No proxy servers are required for transfer. Enables the dragging function of HTML5 to be used to upload files to OBS (with the upload progress displayed) or update OBS contents using web applications. Hosts external web pages, style sheets, and HTML5 applications in different origins. Web fonts or pictures on OBS can be shared by multiple websites. The configuration of CORS takes effect within two minutes Configuring CORS This section describes how to use CORS in HTML5 to implement cross-origin access. OBS has the following storage classes: Standard, Infrequent Access, and Archive. Archive buckets do not support CORS. Procedure Step 2 Log in to OBS Browser. Click the blank area in the row of the bucket for which you want to configure CORS and choose More > Configure CORS Rule, as shown in Figure

65 10 CORS Figure 10-1 Choosing Configure CORS Rule Step 3 Click Add. NOTE You can set a maximum of 100 CORS rules for OBS. Step 4 In the Add CORS Rule dialog box that is displayed, as shown in Figure 10-2, enter CORS rules. Figure 10-2 Adding a CORS rule Table 10-1 describes parameters in CORS rules. 60

66 10 CORS Table 10-1 Parameters in CORS rules Parameter Allowed Origin Allowed Method Allowed Header Exposed Header Cache Duration (s) Description Requests from this origin can access the bucket. This parameter is mandatory. Multiple matching rules are allowed. One rule occupies one line, and allows one wildcard character (*) at most. For example: Specifies the acceptable operation type of buckets and objects. This parameter is mandatory. The methods include GET, POST, PUT, DELETE, and HEAD. Specifies the allowed header of cross-origin requests. Only CORS requests matching the allowed header are valid. You can enter multiple allowed headers (one per line) and each line can contain one wildcard character (*) at most. Spaces and special characters including &:< are not allowed. This parameter is optional. Specifies the exposed header in CORS responses, providing additional information for clients. You can enter multiple exposed headers (one per line). Spaces and special characters including *&:< are not allowed. This parameter is optional. Specifies the duration that your browser can cache CORS responses, expressed in seconds. The default value is 100. This parameter is optional. Step 5 Step 6 Click OK. The Configure CORS Rule dialog box is displayed. Click OK to save the rules. After CORS is successfully configured, only the addresses specified in Allowed Origin can access a bucket on OBS using the method specified in Allowed Method. For example, you configure CORS parameters of bucket testbucket as follows: Allowed Origin: Allowed Method: GET Allowed Header: left blank Exposed Header: left blank Cache Duration (s):

67 10 CORS Then, OBS only allows GET requests from origin to access bucket testbucket without restricting the request headers. Your browser can cache the CORS requests for 100 seconds. Follow-up Procedure New rules are displayed in the Configure CORS Rule dialog box. You can select a rule and modify or delete it. 62

68 11 Logging 11 Logging For the analysis or audit purpose, you can enable Logging. Access logs enable a bucket owner to analyze the property, type, or trend of requests to the bucket in depth. When the log management function of a bucket is enabled, OBS will log access requests for the bucket automatically, and write the generated log files to the specified bucket (target bucket) Logging Overview OBS can record bucket access requests in logs for request analysis and log audit. Logs occupy some OBS storage space rented by users, which may cause extra fees. For this reason, OBS does not collect bucket access logs by default. After log management is configured, you can view the operation logs in the target bucket that stores the logs within approximately fifteen minutes. The following shows the access log of the target bucket: 787f2f92b a4fe2ab75eb09b8 bucket [13/Aug/2015:01:43: ] xx.xx.xx.xx 787f2f92b a4fe2ab75eb09b BACAD9376ECE141B842B94535B REST.GET.BUCKET.LOCATION - "GET /bucket?location HTTP/1.1" "-" "HttpClient" - Table 11-1 lists the information contained in the access log of each bucket. Table 11-1 Bucket log format Name Description Example BucketOwner ID of the bucket owner 787f2f92b a4fe2ab75eb09b8 Bucket Bucket name bucket Time Request timestamp [13/Aug/2015:01:43: ] Remote IP Request IP address xx.xx.xx.xx Requester ID of the requester 787f2f92b a4fe2ab75eb09b8 RequestID ID of the request BACAD9376ECE141B842B94 535B 63

69 11 Logging Name Description Example Operation Operation REST.GET.BUCKET.LOCATION Request-URI Request URI GET /bucket?location HTTP/1.1 HTTPStatus Return code 200 BytesSent Size of the HTTP response, expressed in bytes 211 TotalTime Processing time on the server 6 Turn- AroundTime Total request processing time Configuring Logging Prerequisites Procedure After Logging is enabled for a bucket, OBS automatically converts bucket logs into objects following the naming rules and writes the objects into a specific bucket. The log delivery user group has been assigned the Write and ACL View permissions for the target bucket. For details, see section 7.2 Setting ACL Permissions for Buckets. Step 2 Log in to OBS Browser. Click the blank area in the row of the bucket for which you want to configure logging and choose More > Configure Logging, as shown in Figure Figure 11-1 Choosing Configure Logging Step 3 Select Enable, select a value for Target Bucket, and enter a value for Target Prefix, as shown in Figure Then, click Save. 64

70 11 Logging Figure 11-2 Log management Target Bucket indicates the bucket storing logs. Target Prefix indicates the prefix of a log file name. After logging is enabled, generated logs are named using the following format: <TargetPrefix>YYYY-mm-DD-HH-MM-SS-<UniqueString> <TargetPrefix> indicates the specific target prefix. YYYY-mm-DD-HH-MM-SS indicates the date and time when the log is generated. <UniqueString> indicates a character string generated by OBS. On OBS Browser, if configured <TargetPrefix> ends with a slash (/), logs generated in the bucket are stored in the <TargetPrefix> folder in the target bucket to facilitate management. For example: If the target bucket is bucket and target prefix is bucket-log/, all logs are stored in the bucket-log/ folder in bucket. The log file is named as follows: N7MXLAF1BDG7MPDV. If the target bucket is bucket and target prefix is bucket-log, all logs are directly stored in bucket. The log file is named as follows: bucket-log N7MXLAF1BDG7MPDV. After log management is configured, you can view the operation logs in the target bucket that stores the logs within approximately fifteen minutes. 65

71 12 Adding External Buckets 12 Adding External Buckets After external buckets are added, they can be accessed locally. This section describes how to add and configure external buckets External Buckets Overview OBS enables you to add buckets of other users if you have the access permission for the buckets. By doing so, you can access the external buckets locally using your account Adding External Buckets Prerequisites OBS Browser supports the external bucket adding function. The current account has been assigned the ACL permissions to access the buckets of other users. For example, account A needs to add bucket bucket_share of account B to itself so that account A can read objects stored in bucket bucket_share. Account B needs to obtain Account ID of account A and set the Read permission on bucket bucket_share for account A using OBS Console. Account A can click after the target bucket to view the Account ID (same as the owner ID) in the Basic dialog box that is displayed. If account B has set the Read permission on bucket bucket_share for Registered User, all registered users can add bucket bucket_share. For details about how to set permissions for Registered User, see section 7.2 Setting ACL Permissions for Buckets. NOTE Currently, you can only use OBS Console to set ACL permissions of a specific user. However, you can use both OBS Console and OBS Browser to set ACL permissions of Registered User. 66

72 12 Adding External Buckets Procedure Step 2 Step 3 Log in to OBS Browser. In the upper left corner on the page, click Add Bucket. Select Add external bucket for Method. In the Bucket Name text box, enter the name of the external bucket to be added and click OK. Figure 12-1 displays the Add Bucket page. Figure 12-1 Adding an external bucket After successfully adding an external bucket, you can see the external bucket in the bucket list and have the ACL access permissions for the bucket. Example Related Operations If you are assigned the Write and Read permissions for bucket test, you can leverage external bucket adding to add bucket test to a local computer using your account. You can see bucket test in the bucket list on the left and have the write permission for the bucket. That is, you can upload objects to, overwrite objects in, and delete objects from the bucket. You can click Unmount to unmount external buckets according to your site requirements. 67

73 13 Server-Side Encryption 13 Server-Side Encryption Server-side encryption secures stored objects at a higher level. This section introduces serverside encryption and describes how to configure it Server-Side Encryption Overview After server-side encryption is enabled, objects to be uploaded will be encrypted and stored on the server. When downloading the encrypted objects, the encrypted data will be decrypted on the server and displayed in plaintext to users. Key Management Service (KMS) uses Hardware Secure Modules (HSMs) to ensure key security, enabling users to easily create and manage encryption keys. Keys are not displayed in plaintext outside HSMs, which prevents key disclosure. All operations performed on keys are controlled and logged, and usage of all keys is recorded, meeting regulatory compliance requirements. OBS Browser supports server-side encryption with KMS-managed keys (SSE-KMS). In SSE- KMS mode, OBS uses the keys provided by KMS for server-side encryption. OBS browser supports SSE-KMS encryption by invoking APIs Uploading a File with Server-Side Encryption OBS allows users to encrypt objects using server-side encryption so that the objects can be securely stored on OBS. Prerequisites The KMS Administrator permission has been added in the region of OBS using Identity and Access Management (IAM). For details about how to add the permission, see How Do I Manage User Groups and Grant Permissions to Them? in the Identity and Access Management User Guide. Procedure Log in to OBS Browser. 68

74 13 Server-Side Encryption Step 2 In the upper right corner on the page, click. Step 3 Choose System Configuration > General. The System Configuration dialog box is displayed, as shown in Figure Figure 13-1 Configuring the system Step 4 Select Enable HTTPS and Enable KMS encryption. If Enable HTTPS and Enable KMS encryption are selected, KMS encryption will be implemented for all objects uploaded to OBS. After objects are uploaded, click on the right of the object list. In the Properties dialog box that is displayed in Figure 13-2, view the object encryption status. KMS encryption indicates that server-side encryption has been implemented for the object. No indicates that server-side encryption has not been implemented for the object. The object encryption status cannot be changed. NOTE HTTPS must be enabled when you enable KMS encryption to upload objects. Therefore, if you deselect Enable HTTPS, Enable KMS encryption is deselected automatically. 69

75 13 Server-Side Encryption Figure 13-2 Properties of the encrypted object NOTE Server-side encryption does not support HTTP. To use server-side encryption, enable HTTPS. Do not delete the encryption key that is being used for an encrypted object. Otherwise, the encrypted object cannot be downloaded. 70

76 14 Task Management 14 Task Management OBS supports concurrent file or folder uploads or downloads. Using OBS Browser, you can easily manage the upload, deletion or download tasks. In the right corner of the task management page, you can view the numbers of all uncompleted tasks, completed tasks, and total tasks. You can manually adjust the column width of the task list. In the lower left corner of the Completed task list, you can set the number of completed tasks displayed on each page. If the number of displayed items exceeds 200,000, the system will save the first 100,000 items of tasks that are created earlier to the history directory in the installation path of OBS Browser. These items are saved in the historydbdata[time stamp].csv format, for example, historydbdata t csv Managing Upload Tasks Context Prerequisites Procedure This section describes how to manage upload tasks using OBS Browser. An upload task may be suspended or canceled, or an upload failure may occur when data is being uploaded to OBS. You can use upload task management to manage upload tasks. You have upload tasks to be managed. Log in to OBS Browser. Step 2 In the upper right corner on the page, click. Step 3 In the upper right corner, select Upload from the drop-down list. The list of running upload tasks is displayed, as shown in the example in Figure

77 14 Task Management Figure 14-1 Upload task list Upload tasks may fail due to various causes. To view the causes, choose All statuses > Failed. You can select a failed upload task and click Alternatively, you can move the pointer cursor task to view the causes. to perform the task again. in the Status column of the failed upload Step 4 Optional: Select an ongoing upload task and click to suspend the task. Alternatively, you can click Suspend All to suspend all tasks. Select a suspended upload task and click Run All to resume all suspended tasks. to resume the task. Alternatively, you can click Step 5 Optional: Select an ongoing upload task and click to cancel the task. Alternatively, you can click Cancel All to delete all tasks. Step 6 Optional: Click the Completed button on the top of the page to view completed tasks. You can also click after a completed task to delete the task or click Delete All on the top of the page to delete all completed upload tasks Managing Download Tasks This section describes how to manage download tasks using OBS Browser. Prerequisites You have download tasks to be managed. Procedure Log in to OBS Browser. Step 2 In the upper right corner on the page, click. Step 3 In the upper right corner, select Download from the drop-down list. The list of running download tasks is displayed, as shown in the example in Figure

78 14 Task Management Figure 14-2 Download task list Download tasks may fail due to various causes. To view the causes, choose All statuses > Failed. You can select a failed download task and click to perform the task again. Alternatively, you can move the pointer cursor download task to view the causes. in the Status column of the failed Step 4 Optional: Select an ongoing download task and click to suspend the task. Alternatively, you can click Suspend All to suspend all tasks. Select a suspended download task and click click Run All to resume all suspended tasks. to resume the task. Alternatively, you can Step 5 Optional: Select an ongoing download task and click to cancel the task. Alternatively, you can click Cancel All to delete all tasks that are being uploaded, downloaded, and deleted. Step 6 Optional: Click the Completed button on the top of the page to view completed tasks. You can also click after a completed task to delete the task or click Delete All on the top of the page to delete all completed download tasks Managing Deletion Tasks This section describes how to manage deletion tasks using OBS Browser. Prerequisites You have deletion tasks to be managed. Procedure Log in to OBS Browser. Step 2 In the upper right corner on the page, click. Step 3 In the upper right corner, select Delete from the drop-down list. The list of running deletion tasks is displayed, as shown in the example in Figure

79 14 Task Management Figure 14-3 Deletion task list Deletion tasks may fail due to various causes. To view the causes, choose All statuses > Failed. You can select a failed deletion task and click to perform the task again. Alternatively, you can move the pointer cursor deletion task to view the causes. in the Status column of the failed Step 4 Optional: Select an ongoing deletion task and click to suspend the task. Alternatively, you can click Suspend All to suspend all tasks. You can click to resume a suspended deletion task. Alternatively, you can click Run All to resume all suspended tasks. Step 5 Optional: Select an ongoing deletion task and click to cancel the task. Alternatively, you can click Cancel All to delete all tasks that are being uploaded, downloaded, and deleted. Step 6 Optional: Click the Completed button on the top of the page to view completed tasks. You can also click after a completed task to delete the task or click Delete All on the top of the page to delete all completed deletion tasks Managing Restoration Tasks This section describes how to manage restoration tasks using OBS Browser. Prerequisites You have restoration tasks to be managed. Procedure Log in to OBS Browser. Step 2 In the upper right corner on the page, click. Step 3 In the upper right corner, select Restore from the drop-down list. The list of running restoration tasks is displayed, as shown in the example in Figure

80 14 Task Management Figure 14-4 Restoration task list Restoration tasks may fail due to various causes. To view the causes, you can move the pointer cursor in the Status column of the failed restoration task to view the causes. You cannot view Speed and Remaining Time. However, you can click More>Object Properties on the right of the object to view its restoration status in the Properties dialog box, as shown in Figure Figure 14-5 Object properties You can download the file only after its status changes to Restored. You can click the Refresh button in the upper right corner to refresh the restoration tasks and to view the restoration progress. The system also automatically refreshes the restoration tasks every 5 minutes. NOTE For tasks in the Restoring status, the Run All and Suspend All buttons do not take effect. The Cancel All button does not take effect on tasks that are in the Restoring status, but will delete tasks that fail to be restored. Step 4 Optional: Click the Completed button on the top of the page to view completed tasks. You can also click after a completed task to delete the task or click Delete All on the top of the page to delete all completed restoration tasks. 75

81 15 Typical Application 15 Typical Application 15.1 Storing Video Data Context A user is a film lover and has a large number of videos to be stored. However, this user's disk cannot be expanded in real time. For this reason, the user hopes to use OBS to store videos. The user needs personal data to be isolated and protected from that of other users and resumable data transfer to be available during the upload of large files. Procedure Step 2 Step 3 Step 4 Step 5 Step 6 Step 7 Step 8 Start OBS Browser. In the Add Account dialog box, enter required information to create an account upon the initial start of OBS Browser. Click Add Bucket to create a bucket for storing data. Click the created bucket. Click Create Folder to create a folder. Click Upload to upload a file or folder. Click Manage Tasks. Click Suspend, Run or Cancel to manage the file being uploaded. Follow-up Procedure To obtain files stored on OBS, you can start OBS Browser and download the files to a local computer. 76

82 15 Typical Application 15.2 Backing Up and Archiving Data Context Procedure OBS storage classes (Standard, Infrequent Access, and Archive) meet customers' requirements on storage performance and costs. OBS Infrequent Access is applicable to storing semi-frequently accessed (less than 12 times a year) data requiring quick response. The application scenarios include static website hosting, file synchronization or sharing, and enterprise-level backup. It provides the same durability, access latency, and throughput as OBS Standard but at a lower price. OBS Archive is applicable to archiving rarely-accessed (such as once a year) data. The application scenarios include data archiving and long-term data retention for backup. OBS Archive is secure, durable, and inexpensive, which can replace tape libraries. OBS charging is based on consumed storage capacity and service time. For example, a company has a large number of video or audio data to be backed up or archived in OBS. In the initial period of time, these files may be frequently accessed. However, these files may not be accessed any more, after a certain period of time. Therefore, the company can delete the files that are not to be accessed any more, to reduce cost and use OBS more efficiently. You can use OBS Console and OBS Browser to store data. When using OBS for data backup or archive, you may need to store a large amount of data. In such cases, you can use OBS Browser to upload the data in batches. The batch upload function of OBS Browser greatly shortens the time for data upload. Step 2 Log in to OBS Console. Create the AK and SK that will be used to access OBS Browser. 1. In the upper right corner of the OBS Console page, click the username and choose My Credential, as shown in Figure Figure 15-1 Choosing My Credential 77

83 15 Typical Application 2. My Credential page is displayed. Choose Access Keys > Add Access Key, as shown in Figure Each user can create a maximum of two valid access keys. Figure 15-2 Add access key 3. In the Add Access Key dialog box that is displayed, enter the password and its verification code. NOTE 4. Click OK. If you have not bound an address or mobile number, enter only the password. If you have bound an address and a mobile number, you can select the verification from either of these options. 5. Save the key as prompted. The key is directly saved to the default download folder of the browser. NOTE To prevent the access keys from being leaked, keep it secure. If you click Cancel in the dialog box, the access keys will not be downloaded, and you cannot download them later. You can re-create an access key if you need to use it. 6. Open the downloaded credentials.csv file to obtain the access keys (AK and SK). Step 3 Use the access key created in Step 2 to log in to OBS Browser, as shown in Figure Figure 15-3 Adding an OBS account 78

84 15 Typical Application Step 4 Create different storage types of buckets based on different application scenarios. Backup scenario: Click Add Bucket. On the displayed dialog box, select Infrequent Access for Storage Class. Enter the bucket name and the selected region and click OK to create a bucket of the Infrequent Access storage class to store the backup data, as shown in Figure Figure 15-4 Create Bucket Archive scenario: Click Add Bucket. On the displayed dialog box, select Archive for Storage Class. Enter the bucket name and the selected region and click OK to create a bucket of the Archive storage class to store the archive data, as shown in Figure Figure 15-5 Create Bucket Step 5 Upload the data to be backed up or archived to the newly created bucket. Step 6 Click the icon at the upper left corner of the displayed page to return to the bucket list. Step 7 Step 8 Right-click the bucket where the backup or archive data is stored, and select Configure Lifecycle Rule to go to the life cycle configuration page. In the Configure Lifecycle Rule dialog box, click Add. Figure 15-6 displays the Create Lifecycle Rule dialog box. 79

85 15 Typical Application Figure 15-6 Adding a lifecycle rule Step 9 Select Enable and configure required parameters, and click Save. Status Select Enable to enable the lifecycle rule. Rule Name Identify lifecycle rules. The Rule Name contains a maximum of 255 characters. Applies To: Can be set to Object name prefix or Bucket. : Objects that have the specified prefix will be managed by the lifecycle rule. Object prefix: Objects that have the specified prefix will be managed by the lifecycle rule. Bucket: All objects in the bucket will be managed by the lifecycle rule. Current Version or Historical Version: Transition to Infrequent Access: You can specify the number of days after which objects that have been last updated and meet specified conditions are automatically transitioned to Infrequent Access. This number must be at least 30. Transition to Archive: You can specify the number of days after which objects that have been last updated and meet specified conditions are automatically transitioned to Archive. If objects are configured to be transitioned to both Infrequent Access and Archive, the number of days for transition to Archive must be at least 30 days later than that for transition to Infrequent Access. If only transition to Archive is enabled and transition to Infrequent Access is disabled, there is no limit on the number of days for transition. Expiration Time: You can specify the number of days after which objects that have been last updated and meet specified conditions are automatically deleted. The expiration time must be greater than the two transition times. 80

86 15 Typical Application NOTE Current Version and Historical Version are two concepts for Versioning. If Versioning is enabled, uploading objects with the same name to the same path generates different versions. The object uploaded later is called Current Version, and the object uploaded earlier is called Historical Version. You can configure either, both, or neither of the versions. For example, the following files are stored on OBS on January 7, 2015: log/test1.log log/test2.log doc/example.doc doc/good.txt The following files are stored on OBS on January 10, 2015: log/clientlog.log log/serverlog.log doc/work.doc doc/travel.txt If objects prefixed with log is set to expire in 1 Day on January 10, 2015, OBS will delete objects log/test1.log, log/test2.log, log/clientlog.log, and log/serverlog.log on January 12, On the day of operation, you can set the objects with the name prefix log to be transitioned to Infrequent Access 30 days later, transitioned to Archive 60 days later, and deleted 100 days later, then OBS will transition log/clientlog.log, log/serverlog.log, log/test1.log, and log/test2.log to Infrequent Access on the 31st day, transition them to Archive the 61st day, and delete them on the 101st day, respectively. NOTE The storage class transition and deletion of an object may be delayed after the time condition is met. Generally, the delay does not exceed 48 hours. 0 Click Save to save the lifecycle rule. 81

87 16 Troubleshooting 16 Troubleshooting 16.1 Objects Cannot Be Globally Searched for in a Bucket Question Answer Why cannot objects be globally searched for in a bucket? OBS Browser does not support iterative query of objects in a bucket but supports query of objects in a directory only. If you want to search for an object, go to the directory where the object resides and search for the object. For example, if the root directory of bucket abc contains folder A and object B and folder A contains object C, object C cannot be searched for in the root directory of bucket abc. It can be searched for only in folder A Object URL Cannot Be Opened Using a Browser Question Why cannot an object URL be opened using a browser? Answer If an error message similar to the following is displayed when you are accessing an object using the object URL, configure the Read permission for Anonymous User on OBS Console. For details about how to configure the permission, see Setting ACL Permissions for Objects in the Object Storage Service Console Operation Guide. After configuring the permission, repeat Step3 of 6.2 Accessing an Object Using Its Object URL. <Error> <Code>AccessDenied</Code> <Message>Access Denied</Message> <RequestId> E B18BC86A3FBD65I</RequestId> <HostId> bcmaseve9j9ty/mg646e5xkf5d2jtbhcmxxt6teficxllgbauvuxjj3hl8zfh+b2 82

88 16 Troubleshooting </HostId> </Error> If an error message similar to the following is displayed when you are accessing an object using the object URL, it indicates that the object has been encrypted and an encrypted object cannot be accessed using the object URL. <Error> <Code>InvalidRequest</Code> <Message> The object was stored using a form of Server Side Encryption. The correct parameters must be provided to retrieve the object. </Message> <RequestId> E B282B2D4D98C59P</RequestId> <HostId> heawau3vymy64ms9bipt6mt37agwb3sifx6wjuxzyuw9+vraclou4gprquzop+st </HostId> </Error> 16.3 No Upload Task Is Created After a Large Number of Files Are Selected for Upload Using OBS Browser Question Answer Why is no upload task created and nothing displayed on the page after a large number of files are selected for upload using OBS Browser? For example, after a user logs in to OBS Browser and chooses Upload > Upload File to select a large number of files from drive C for upload, no upload task is created and nothing is displayed on the page. The Upload File function of OBS Browser allows 100 files to be uploaded at the same time. If more files need to be uploaded, place the files in a folder and use the Upload Folder function to upload the folder. Also, the total name length of all files to be uploaded cannot exceed approximately 25,500 characters. If the name length exceeds this threshold, the system stops responding to the upload request Blue or Black Screen of Death Occurs When Files Are Uploaded Using OBS Browser Question Answer Why does blue or black screen of death occur when files are uploaded using OBS Browser? When OBS Browser is used to upload a large number of files or a few of big files, most of the memory is used. Check whether the available memory space of the PC is greater than or equal to 512 MB. If the available memory space of the PC is smaller than 512 MB, close some application programs to release the memory, or add new memory or virtual memory to the PC. If the problem persists after memory is added, collect dump files based on the following procedure, and contact customer service personnel for locating and solving this problem. 83

89 16 Troubleshooting Right-click Computer and choose Properties from the shortcut menu. In the dialog box that is displayed, click the Advanced tab. On the Advanced tab page, click Settings. In the dialog box that is displayed, view the path under Dump file. Figure 16-1 shows a screenshot of the Windows 7 Pro SP1 64-bit operating system, which is used as an example. Figure 16-1 Viewing the Dump file path Step 2 Go to the path, copy and compress all files of which the extension is.dump, and send the compressed package to customer service personnel for locating and solving this problem Relevant Tasks Are Not Displayed in the Task List When Objects Are Managed Using OBS Browser Question Answer Why are the relevant tasks not displayed in the task list when objects are being uploaded, downloaded, or deleted using OBS Browser? When OBS Browser is used to upload, download, or delete objects, the internal database of OBS Browser is invoked. By default, binary data generated while the database is running is saved in the personal folder of the Windows operating system user. If the username of the Windows operating system contains non-letter characters, the internal database of OBS Browser cannot identify the save path of data. As a result, upload, 84