Contabo Product Documentation
Contabo Product Documentation

Object Storage

Overview

Contabo Object Storage is an S3-compatible object storage service built on a Ceph cluster following Red Hat production guidance. Unlike Storage VPS, which provides a full virtual machine with a block disk, Object Storage is accessed entirely via the S3 API or a web UI — there is no server to manage.

Key Features

FeatureDetails
APIS3-compatible; migration from AWS S3 or another S3 provider needs only a new endpoint and new credentials
RedundancyEvery object triple-replicated across servers; high availability mode by default
EncryptionIn transit (TLS) and at rest
RegionsEU, US Central, Singapore — chosen per storage; data is never moved to another region without the customer’s written consent
AccessS3 API (HTTPS only) and a web UI with drag-and-drop file and bucket management
Custom domainsVia a TLS-terminating proxy such as Cloudflare (CNAME)
DDoS protectionAlways-on, network-level, automatic

Quotas

LimitValue
Maximum object size5 TB
Buckets per account100 (default)
Objects per account3 million (default; increasable on request)
API requests250 per second
Bandwidth10 MB/s (80 Mbit/s) default; also depends on the client’s connection
CapacityAdded in 250 GB increments
Auto-scalingOptional automatic expansion in 250 GB increments up to a monthly cap set per account

Storage Regions & Endpoints

RegionS3 Endpoint
EUhttps://eu2.contabostorage.com
US Centralhttps://usc1.contabostorage.com
Singaporehttps://sin1.contabostorage.com

Credentials

  • S3 credentials: Access Key and Secret Key are shown in the Control Panel; the Secret Key can be regenerated there.
  • Management credentials: the Contabo API and cntb CLI use the OAuth2 credentials (client ID, client secret, API user, API password) from the Control Panel, not the S3 keys.

S3 Feature Support

FeatureStatusNotes
Bucket and object operations, multipart upload, metadataSupported
Bucket versioningSupportedBucket-wide (put-bucket-versioning); suspending stops new versions but keeps existing ones; current version marked IsLatest: true
Lifecycle configurationSupported (expiration)Expiration rules in days, optionally by Prefix
Object LockSupportedGOVERNANCE and COMPLIANCE modes; enabled with --object-lock-enabled-for-bucket at bucket creation; retention via put-object-lock-configuration
Bucket policiesSupportedIAM policy format 2012-10-17; principal ARN arn:aws:iam::<s3TenantId>:user/<customerId>:<userId>; s3TenantId via cntb get objectStorages -o=json, userId via cntb get users
Access control lists (ACL)SupportedPer bucket and per object, via web UI or API; public or private links to individual objects
Pre-signed URLsSupportedStandard S3 SDK behaviour

Compatible Tools & Integrations

ToolType
cntbContabo CLI — create and manage Object Storage and users
AWS CLICommand-line S3 management
RcloneBulk migration, sync, and transfer
CyberduckGUI-based file management
s3cmdCommand-line S3 client
WinSCPWindows GUI client
Cloudberry ExplorerGUI-based management
BucketAnywhereMulti-cloud storage manager
goofysMount as a filesystem
s3fs-fuseMount as a FUSE filesystem
NextcloudSelf-hosted file sync and share integration
Apache SparkBig data processing integration
VeleroKubernetes backup and restore
VirtualminWeb hosting panel integration
PleskControl panel backup integration
MastodonMedia storage backend

cPanel/WHM can use Object Storage as a backup destination via folder mounting.

Management

  • Web UI: bucket creation, uploads, ACLs, link sharing
  • S3 API: versioning, lifecycle, Object Lock, ACLs, bucket policies
  • Contabo API / cntb: provisioning of Object Storage, capacity changes, user management
  • Capacity and auto-scaling: Control Panel

Limitations & Notes

  • The S3 API covers most standard operations but does not guarantee full parity with AWS S3; server access logging is not supported.
  • Object Lock cannot be enabled on an existing bucket — create a new bucket with Object Lock enabled.
  • Lifecycle rules support expiration only; storage-class transitions are not documented, and expiration deletes objects irreversibly.
  • SFTP/SCP, FTP/FTPS, NFS/CIFS/SMB and RTSP are not supported — access is via the S3 API and web UI; use a FUSE client (s3fs-fuse, goofys) for filesystem access.
  • Plain HTTP is not supported (HTTPS only); a custom domain requires a TLS-terminating proxy.
  • FileZilla Pro forces virtual-hosted-style bucket names and is not compatible; use Cyberduck instead.
  • Objects changed from public to private may remain cached and accessible for up to one hour after the permission change.
Prev
User Management
Next
VPS