Secure CLOUD File Sharing with Data Sovereignty on 1STACK Cloud

Project Background

The client sought a streamlined file-sharing solution, enabling them to securely store files in a cloud environment and facilitate sharing with their customers. This functionality required the ability for their customers to both download files via a shared link and upload documents back into designated shared folders.

The Challenge

The client demonstrated significant price sensitivity, having previously evaluated Software-as-a-Service (SaaS) offerings from providers such as Box and Nextcloud. Their primary concern revolved around the cost-effectiveness of these solutions.

Specifically, the pricing structures reviewed were:

• Box: RM300 per user per year, offering unlimited storage.
• Nextcloud: RM4,800 annually for 1TB of storage, supporting an unlimited number of users, with a free trial option available.

The Turning Point

The client subsequently expressed a need for an alternative solution to replace their existing Box service, citing its high cost as the primary driver. They provided a more detailed set of requirements for the desired file-sharing platform:

• The solution must be suitable for internal use, accommodating approximately 25 users.
• It must support access for an unspecified number of external guests, with the capability to generate links for file sharing with customers.
• A minimum storage capacity of 100GB is required, with an openness to explore flexible pricing models based on factors such as user count, storage size, and external user access/sharing links.
• The solution must comply with data protection regulations, including the Personal Data Protection Act and GDPR.

Starview’s Solution

Starview proposed and implemented a one-month Proof of Concept (POC) environment within our JHB 1Stack Cloud (https://jhb.cloudsigma.com). This allowed the client to thoroughly evaluate the solution against their specific requirements before committing to a long-term engagement.

The POC environment was configured as follows:

• Ubuntu 24.04 LTS VM: Deployed with 8 vCPUs, 8GB RAM, 50GB NVMe storage, and a dedicated public static IP address.
• Nextcloud Files Application: A comprehensive Content Collaboration Platform (CCP) offering file synchronization, sharing, and real-time collaboration.
• S3-Compatible Object Storage: 1TB total, segregated into a 300GB data bucket and a 700GB backup bucket, with 100GB of outgoing data transfer provisioned and scheduled backup.
• Free Tier Benefits: Monthly inclusion of 50GB NVMe storage, 1GB RAM, and 1TB egress traffic.
• Backup Strategy: An extra 75GB of NVMe storage for scheduled VM disk snapshots.
• Optional Secure VPN Access: Integrated a Virtual Private Network (VPN) feature to ensure that access to the cloud storage environment is restricted to the company’s internal network only. This “Zero Trust” approach hides the Nextcloud instance from the public internet, requiring a secure tunnel for all internal users.

Key Advantages for Nextcloud deployment on 1Stack Cloud

• Unbundled Resource Allocation: Unlike traditional VPS providers that offer fixed “t-shirt” sizes, 1Stack Cloud allows for the precise, independent scaling of CPU, RAM, and storage. This enabled Starview to perfectly match the Nextcloud VM’s resources (8 vCPUs, 8GB RAM, 50GB NVMe) to the client’s specific workload, avoiding the “over-provisioning tax” typical of other cloud providers.
• High-Performance NVMe Storage: The solution leveraged 1Stack Cloud’s clustered NVMe storage, which maximizes IOPS performance across the cluster. This ensured that Nextcloud’s file indexing and database operations remained highly responsive, even under heavy concurrent access.
• Data Sovereignty and Compliance: By deploying on the 1Stack Cloud, the client ensured that their data remained within the local jurisdiction, directly addressing the requirements of the Personal Data Protection Act and GDPR. 1Stack Cloud’s architecture includes triple-layered data security and triple replication, ensuring high availability and protection against node failures.
• Cost Efficiency through Burst Pricing: The client benefited from 1Stack Cloud’s consumption-based billing. Resources are evaluated every five minutes, allowing the client to pay only for what they use beyond their subscriptions. The inclusion of a generous free tier (50GB storage, 1GB RAM, 1TB egress) further enhanced the cost-effectiveness of the solution.
• Enhanced Security via VPN:
  • Network Isolation: By requiring a VPN, the server is protected from brute-force attacks and unauthorized external scans.
  • Secure Remote Work: Employees can access internal resources from anywhere as if they were in the office, using encrypted tunnels.
  • Layered Access Control: Provides a secondary layer of authentication before a user even reaches the Nextcloud login page.

The Results

The client successfully implemented a fully functional Nextcloud Files environment, which comprehensively addressed all their file-sharing requirements. This solution ensured compliance with data protection acts, provided data sovereignty, and offered the resource scalability inherent to our 1Stack Cloud.

Nextcloud Files delivers a robust suite of features that significantly overlap with traditional Document Management System (DMS) functionalities, including:

• File Storage and Sharing: Centralized storage with advanced file synchronization across various devices, complemented by secure sharing options such as password-protected links and customizable expiration dates.
• Full-Text Search: Integration with powerful search engines, such as Elasticsearch or Apache Solr, enabling in-depth content search within documents.
• Versioning and Recovery: Built-in file versioning capabilities allow users to track changes, restore previous iterations, and recover deleted files efficiently.
• Security: Comprehensive security measures, including end-to-end encryption (E2EE), multi-factor authentication (MFA), granular file access control lists, and extensive auditing features for monitoring document activities.
• Workflow Automation (Nextcloud Flow): A flexible system designed to automate actions based on file events, such as automatic tagging, file movement, or the triggering of external processes.
• Retention Policies: Administrative tools to define and enforce file retention and deletion policies based on tags or other criteria, thereby assisting with regulatory compliance.
• Collaboration: Seamless integration with Nextcloud Office (powered by Collabora Online or ONLYOFFICE) for real-time collaborative editing of documents, spreadsheets, and presentations.

Conclusion

For organizations seeking a cost-effective, secure, and scalable CLOUD file sharing solution, Starview’s 1STACK CLOUD provides a powerful alternative to traditional SaaS platforms.

By combining Nextcloud with S3 storage and flexible cloud infrastructure, businesses can achieve full data control, compliance, and performance—at a significantly lower cost.

Contact Starview

You may contact Starview at https://1stack.net/contact/