Object Storage limits

The limits on buckets, bucket names, object keys, access keys, listings, presigned URLs and deletions in Object Storage.

View as Markdown

This page lists every fixed limit in Object Storage, with the message you see when you reach one. The plan sets the storage allowance, and the page that covers each task explains how to work within its limits.

Service

Section titled Service

What	Limit
Storage	The plan's allowance, shown as Included on the Overview tab. Uploads go on working above it, and the plan sets a rate per GB-month for the storage above it. A GB is 1024³ bytes.
Buckets	25 on each service. Over it: `This service already has 25 buckets, which is the most one service may hold`.
Access keys	No fixed number.
Plan change	Keeps the allowance. For more storage included, move to a larger plan (Change the plan).
Changes while the service is not `active`	You cannot create or delete a bucket or create a key: `This service is suspended; it can be changed once it is active`, with the service's status in place of `suspended`. The dashboard shows Upload… and New folder… only while the service is `active`. You can revoke a key in any status.
Suspension	Keys stop working within a couple of minutes and work again when the service is active. The objects stay where they are.
After the service ends	Keys stop working within a couple of minutes. We keep the objects for 7 days, then delete them with their buckets (Cancel the service).

Bucket names

Section titled Bucket names

What	Limit
Prefix	Every name starts with your account namespace and a hyphen, such as `u7-`. We add it when you leave it out.
Length	3–63 characters, prefix included. With the prefix `u7-`, you can type up to 60. Over it: `Use at most 63 characters, including the prefix.`
Characters	Lowercase letters, digits, hyphens and dots. We change uppercase letters to lowercase. Anything else: `Use lowercase letters, digits, hyphens and dots, and start and end with a letter or digit.`
First and last character	A letter or a digit.
Dots	Not next to another dot or a hyphen: `Dots and hyphens cannot be next to each other.`
Uniqueness	One bucket with each name across your account, whichever service holds it: `A bucket named u7-assets already exists`.
After a delete	The name stays taken for 7 days: `u7-assets was deleted recently and is still being removed. Pick another name, or wait for the removal to finish.`
Rename or move	Not possible. Create a new bucket and copy the objects into it with an S3 client.

The dashboard checks the length, the characters and the dots as you type, and shows the message under Name. It shows the messages about a name that is taken after you select Create bucket. Create a bucket through the API lists the messages the API gives for each rule.

Buckets

Section titled Buckets

What	Limit
Region	One, chosen when you create the bucket. The bucket answers only at that region's endpoint.
Objects in a bucket	No fixed number.
Public access	None. Every request needs a signature from an access key, or a presigned URL.
Versions	None. An upload replaces an object that has the same key, and a deleted object cannot be restored.
Custom domains	None. Buckets answer only at the regional endpoints.
Deleting a bucket that holds objects	Needs the tick box in the dashboard, or `force=true` through the API. Otherwise: `u7-assets is not empty. Delete it with force to destroy its contents as well.`

Objects

Section titled Objects

What	Limit
Object key	Up to 1,024 bytes in UTF-8 for uploads in the dashboard and presigned URLs from the API. Over it: `Object keys are at most 1024 bytes`.
Object size	The dashboard and the API check no size. The dashboard sends each file in one request, so upload files of several gigabytes with an S3 client, which sends them in parts.
Uploads in the dashboard	Files only, one request each. Upload a folder with its contents from an S3 client.
Downloads in the dashboard	One object at a time.
Folder names in the dashboard	No backslash: `Enter a folder name without backslashes.` We remove a `/` at the start or the end.

Access keys

Section titled Access keys

What	Limit
Keys on a service	No fixed number.
Label	1–64 characters: letters, digits, spaces, dots, hyphens and underscores, starting with a letter or a digit. Otherwise: `Labels use letters, digits, spaces, dots, hyphens and underscores`.
Label on a service	Each key on a service has a label of its own, and labels that differ only in upper and lower case count as the same: `A key labelled ci deploy already exists on this service`.
Access key ID	24 characters, starting with `AKIA`.
Secret key	43 characters, shown once when you create the key.
Permissions	Read only or Read and write. No key can create or delete a bucket.
Scope	One bucket of the service, or All buckets on this account.
Regions	A key works at every regional endpoint.
Time to take effect	Up to a couple of minutes after you create or revoke a key.

What a key can do explains the permissions and scopes.

Presigned URLs

Section titled Presigned URLs

What	Limit
Lifetime of a link from the API	60–3600 seconds, 900 by default. We shorten a request for up to 86400 seconds to 3600. Below 60 or above 86400, the API answers `422`.
What a link does	One operation on one object: `get`, `put` or `delete`.
Uses	Any number, until the link expires.
Object key	Up to 1,024 bytes: `Object keys are at most 1024 bytes`.
Content type	Up to 255 characters, for `put`.
Links from an S3 client	Signed with your key. They stop working when they expire or when you revoke the key.

Share a file with a presigned URL shows both ways to create one.

Listing and deleting

Section titled Listing and deleting

What	Limit
Entries per page in the dashboard	200. Load more lists the next 200.
Entries per page through the API	1–1000 (`max_keys`), 200 by default.
`prefix` through the API	Up to 1,024 characters.
`token` through the API	Up to 2,048 characters.
Keys in one delete request through the API	1–1000.
Deleting a folder in the dashboard	Up to 10,000 objects under each folder in one run. Over it: `A folder had more than the browser deletes at once; run the delete again for the rest.`

Usage history

Section titled Usage history

What	Limit
Measurement	Every hour, for every bucket. Sizes and object counts come from the last measurement.
History through the API	1–366 days, 30 by default: `days` on `GET /api/v1/client/object-storage/{service_id}/usage`.
Stored over time chart	The last 7, 30 or 90 days, in at most 120 bars.

Connection

Section titled Connection

What	Limit
Endpoint	`https://s3.<region>.coritan.com:7337`, one for each region.
Port	7337. Port 443 does not serve Object Storage.
Protocol	HTTPS with TLS 1.2 or 1.3. A plain HTTP request to port 7337 answers `400 Bad Request`.
Addressing	Path style only.
Signature	AWS Signature Version 4, with any region name.
Host	The endpoint's host and port, exactly. A request sent to an IP address, or through a proxy that changes the `Host` header, fails with `SignatureDoesNotMatch`.

Connect an S3 client explains each setting.

Rate limits

Section titled Rate limits

The Object Storage routes of the Coritan API have no budget of their own. They count towards the limits on requests from one address that Rate limits describes. S3 requests go to the regional endpoint and do not count towards those limits.

Section titled Related