ECS 3.5.0.1 Administration Guide

DNS configuration

In order for an S3 compatible application to access ECS storage, you must ensure that the URL resolves to the address of the ECS data node, or the data node load balancer.

If your application uses path style addressing, you must ensure that your DNS system can resolve the address. For example, if your application issues requests in the form ecs1.yourco.com/bucket, you must have a DNS entry that resolves ecs1.yourco.com to the IP address of the load balancer that is used for access to the ECS nodes. If your application is configured to talk to Amazon S3, the URI is in the form s3-eu-west-1.amazonaws.com.

If your application uses virtual host style addressing, the URL includes the bucket name and can include a namespace. Under these circumstances, you must have a DNS entry that resolves the virtual host style address by using a wildcard in the DNS entry. This also applies where you are using path style addresses that include the namespace in the URL.

For example, if the application issues requests in the form mybucket.s3.yourco.com, you must have the following DNS entries:

• ecs1.yourco.com
• *.ecs1.yourco.com

If the application is previously connected to the Amazon S3 service using mybucket.s3.amazonaws.com, you must have the following DNS entries:

• s3.amazonaws.com
• *.s3.amazonaws.com

These entries resolve the virtual host style bucket address and the base name when you issue service-level commands (for example, list buckets).

If you create an SSL certificate for the ECS S3 service, it must have the wildcard entry on the name of the certificate and the non wildcard version as a Subject Alternate Name.