Vault errors and limits
Every error a backup tool can show you when talking to s3.cloudbox.biz, what it
means, and what to do about it.
| Error | Means | Do this |
|---|---|---|
SignatureDoesNotMatch | Secret wrong, clock skew, or wrong signature version | Re-enter the secret; sync the clock; use Signature V4 and path-style addressing |
NoSuchBucket | Bucket does not exist under that exact name | Create it in the Backup tab; names are case-sensitive, no dots |
AccessDenied | Key and bucket belong to different accounts, or the key was deleted | Use a key from the same account; create a new key if needed |
QuotaExceeded (403) | The plan is full; uploads refused, nothing deleted | Rotate or prune old backups, or move up a plan; switch on auto-expand |
| Slow downloads (~0.5 MB/s) | This month's download allowance is used up | Wait for the 1st, or store more (the allowance is 3× what you store) |
Certificate error on bucket.s3.cloudbox.biz | Bucket-in-hostname addressing is not available yet | Use path-style addressing |
InvalidBucketName | Name has uppercase letters, dots or is too short/long | 3–62 chars, lowercase letters, digits, hyphens |
Addressing styles
S3 clients reach a bucket either as s3.cloudbox.biz/bucket (path-style) or as
bucket.s3.cloudbox.biz (virtual-hosted). Vault supports path-style today, which is what
Hyper Backup, HBS 3, restic, rclone, Veeam and Duplicati use with a custom endpoint. Virtual-hosted addressing
needs a wildcard certificate that is being arranged; cPanel's S3 destination depends on it.
Allowances
- Storage: 10 GB free; paid per TB from 1 TB. Measured on disk hourly.
- Downloads: free up to 3× stored per month (1× free tier), then object downloads are throttled until the 1st. Uploads, listings and deletes are never throttled.
- Retention: none imposed — no minimum storage duration and no automatic deletion. Your tool decides.
Questions
SignatureDoesNotMatch
The secret access key does not match the key ID, or the client's clock is more than a few minutes off (Signature V4 requests are time-stamped). Re-enter the secret, sync the clock with NTP, and make sure the tool is using Signature Version 4 and path-style addressing.
NoSuchBucket / bucket not listed
Buckets are created in the CloudBox Backup tab, not by the backup tool. Names are case-sensitive and must be lowercase letters, digits and hyphens with no dots.
AccessDenied
The key belongs to a different CloudBox account than the bucket, or the key was deleted. Each key can only see its own account's buckets.
QuotaExceeded on upload
The plan is full. Uploads are refused until space is freed (rotate or prune old backups) or the plan grows. Downloads and deletes keep working and nothing is deleted. Auto-expand in the Backup tab moves paid plans up a tier automatically.
Restores are slow
You have used this month's download allowance (3x what you store; 1x on the free tier). Object downloads are slowed to about 0.5 MB/s until the 1st; uploads are unaffected. The Backup tab shows the position.
Certificate error with bucket.s3.cloudbox.biz
Bucket-in-hostname (virtual-hosted) addressing is not available yet. Use path-style addressing (s3.cloudbox.biz/bucket). Tools that only do bucket-in-hostname addressing, such as cPanel, will work once the wildcard certificate is in place.
Why is my cPanel backup so large?
cPanel sends full backups to S3 on every run; only its rsync destination is incremental. Keep retention counts low, or use restic on the server for databases and home directories.
Can I delete backups whenever I like?
Yes. There is no minimum storage duration; a deleted object stops counting immediately. The only exception is a bucket created with Object Lock, whose objects cannot be deleted until their retention ends.
How fast is it?
Tens of MB/s per client, more with parallel connections. Large single files upload as multipart.
Where is my data stored?
On hardware CloudBox owns in the UK. Object contents are whatever your tool sent; with client-side encryption enabled in the tool (Hyper Backup, HBS 3, restic), that is ciphertext only you can open.