Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Is there a way to get an IP address to refer to Amazon S3 Storage location? The current solution my company is thinking of going with involves setting up a EC2 server with an Elastic IP and using Squid as a Proxy to the S3 location. Is there a better way?

share|improve this question

1 Answer 1

up vote 6 down vote accepted

I assume this is to work with geniuses who love static firewall rules.

There is probably not a better way, unfortunately. You simply have to put a proxy with a fixed IP address in front of S3 to present the client with a fixed IP. You could in theory pick an existing S3 IP, but it might change from underneath you if amazon changes their network.

We have similar trouble with some of our customers who insist that white-listing allowed sites by IP address is somehow "more secure" than using a filtering proxy (or even reasonable given the pace of change on the internet). We can't use CDNs because of this (although anycast-based CDNs such as MaxCDN or CacheFly might work out, we're testing).

I would not use squid unless you're a complete masochist. Nginx would be a much better option as a reverse-proxy: smaller, faster, more secure, easier to configure.

share|improve this answer
1  
Good answer. The "what IP should we whitelist" thing drives me bonkers. –  ceejayoz Feb 16 '12 at 19:51
    
This is for those geniuses. Actually customer geniuses. +1 –  Tyndall Feb 17 '12 at 20:12

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.