1.  > 
  2. Diagrams
s3-orchestrator

s3-orchestrator diagrams

Interactive architecture and flow diagrams for the S3 Orchestrator internals.
System Architecture

End-to-end architecture showing the request path, storage layer, background services, and observability.

Admission Control Flow

Detailed request lifecycle through admission control, authentication, routing, and circuit breakers.

Write Path

PutObject flow through backend selection, encryption, failover, and metadata recording.

Read Path

GetObject flow through location lookup, failover, broadcast reads, decryption, and streaming.

Circuit Breaker

Three-state FSM for backends and database: closed, open, half-open transitions and probe logic.

Encryption Flow

Envelope encryption pipeline: DEK generation, key wrapping, chunk-based AES-256-GCM, and range decryption.

Background Services

Periodic workers: replicator, rebalancer, cleanup queue, lifecycle, multipart cleanup, and usage flusher.

Database Schema

Entity-relationship diagram of the PostgreSQL metadata store: tables, columns, indexes, and relationships.

s3-orchestrator s3-orchestrator

  • Home


    • Documentation
      • Quickstart
      • README
      • User Guide
      • Admin Guide
      • API Reference
      • Security Hardening
      • Performance Tuning
      • Disaster Recovery
      • Version Migration
      • Changelog
      • Benchmarking
      • Performance envelope
    • Guides
      • Nomad/k8s Full Stack Demo
      • Encrypting Existing Data
      • Key Rotation
      • Maximizing Free Tiers
      • Understanding Replication
      • Event Notifications
      • Local to Cloud Replication
      • Simple Multi-Cloud Redundancy
      • Deploying on Nomad with Vault
      • Deploying with systemd
    • Diagrams
      • Architecture
      • Admission Control
      • Write Path
      • Read Path
      • Circuit Breaker
      • Encryption Flow
      • Background Services
      • Database Schema
    • Go API Reference
      • accounting
      • admin
      • adminctl
      • audit
      • auth
      • backend
      • breaker
      • bufpool
      • cache
      • chunkframing
      • config
      • core
      • counter
      • dashboard
      • di
      • drain
      • encryption
      • event
      • httpserver
      • httputil
      • infra
      • initcmd
      • instanceid
      • internalkey
      • ioutilx
      • lifecycle
      • logfmt
      • metrics
      • multipart
      • must
      • notify
      • object
      • observe
      • postgres
      • proxy
      • proxytest
      • readpath
      • reconcile
      • reload
      • runtime
      • s3api
      • serve
      • sqlite
      • store
      • storetest
      • synccmd
      • syncutil
      • telemetry
      • tickrunner
      • ui
      • worker
      • workerpool
      • writepath

        Built by Alex Freidah

        MIT License