Skip to main content

Citadels

A Citadel is the customer-facing storage endpoint of a Storage Zone. The lionbackup client directs its uploads to it.

What a Citadel does​

A Citadel receives the encrypted data objects over HTTPS and:

  • checks the authentication (project-scoped access token),
  • checks quotas and limits (see Limits),
  • stores the objects in the attached, S3-compatible object storage.

Multiple Citadels per zone​

Several Citadels can be operated per Storage Zone. The client software selects an available endpoint. If a Citadel fails during the transfer, the client automatically switches to another available endpoint — without the backup run having to be restarted manually.

Anomaly detection​

Security-relevant events of the Citadels are evaluated centrally. An automated anomaly detection recognizes, among other things:

  • the use of tokens outside the intended project,
  • indications of unencrypted uploads (low data entropy),
  • statistical outliers in volume and throughput.

Anomalies are shown as a notice in the Portal and can optionally be delivered by email to registered recipients. Read more under Security.