Skip to main content Crate rustfs_config Copy item path Source constants oidc EnableState ScannerSpeed Scanner speed preset controlling throttling behavior. AMQP_EXCHANGE AMQP_MANDATORY AMQP_PASSWORD AMQP_PERSISTENT AMQP_QUEUE_DIR AMQP_QUEUE_LIMIT AMQP_ROUTING_KEY AMQP_TLS_CA AMQP_TLS_CLIENT_CERT AMQP_TLS_CLIENT_KEY AMQP_URL AMQP_USERNAME APP_NAME Application name
Default value: RustFS
Environment variable: RUSTFS_APP_NAME AUDIT_DEFAULT_DIR BASE_DSN_STRING COMMENT_KEY DEFAULT_ADDRESS Default address for rustfs
This is the default address for rustfs. DEFAULT_ADMIN_PEER_PROBE_TIMEOUT_SECS DEFAULT_ALLOCATOR_RECLAIM_ENABLED DEFAULT_ALLOCATOR_RECLAIM_FORCE DEFAULT_ALLOCATOR_RECLAIM_IDLE_INTERVALS DEFAULT_ALLOCATOR_RECLAIM_INTERVAL_SECS DEFAULT_API_MAX_CONNECTIONS Default for RUSTFS_API_MAX_CONNECTIONS (0 = unlimited). DEFAULT_API_OBJECT_MAX_VERSIONS Default and maximum accepted value for RUSTFS_API_OBJECT_MAX_VERSIONS. DEFAULT_API_RATE_LIMIT_BUCKET_BURST Default for RUSTFS_API_RATE_LIMIT_BUCKET_BURST (0 = same as bucket RPM). DEFAULT_API_RATE_LIMIT_BUCKET_RPM Default for RUSTFS_API_RATE_LIMIT_BUCKET_RPM (0 = dimension disabled). DEFAULT_API_RATE_LIMIT_BURST Default for RUSTFS_API_RATE_LIMIT_BURST (0 = same as RPM). DEFAULT_API_RATE_LIMIT_ENABLE Default for RUSTFS_API_RATE_LIMIT_ENABLE. DEFAULT_API_RATE_LIMIT_RPM Default for RUSTFS_API_RATE_LIMIT_RPM. DEFAULT_AUDIT_ENABLE Default global audit switch (disabled by default). DEFAULT_BUCKET_CONFIG_PARSE_MODE Default bucket config parse mode. DEFAULT_BUFFER_MAX_SIZE Default maximum buffer size: 1MB DEFAULT_BUFFER_MIN_SIZE Default minimum buffer size: 64KB DEFAULT_BUFFER_PROFILE Default buffer profile for adaptive buffer sizing
This is the default buffer profile for adaptive buffer sizing.
It is used to identify the workload profile for adaptive buffer sizing.
Default value: GeneralPurpose DEFAULT_BUFFER_UNKNOWN_SIZE Default buffer size for unknown file size: 256KB DEFAULT_CAPACITY_ENABLE_DYNAMIC_TIMEOUT Enable dynamic timeout calculation based on directory characteristics
Default: true (enabled) DEFAULT_CAPACITY_FOLLOW_SYMLINKS Follow symbolic links during capacity calculation
Default: false (disabled for safety) DEFAULT_CAPACITY_MAX_TIMEOUT_SECS Maximum capacity calculation timeout in seconds
Default: 15 seconds DEFAULT_CAPACITY_METRICS_INTERVAL_SECS Capacity metrics logging interval in seconds
Default: 600 seconds (10 minutes) DEFAULT_CAPACITY_MIN_TIMEOUT_SECS Minimum capacity calculation timeout in seconds
Default: 2 seconds DEFAULT_COMPRESS_ENABLE Default compression enable state
Aligned with MinIO behavior - compression is disabled by default DEFAULT_COMPRESS_EXTENSIONS Default file extensions for compression
Empty by default - relies on MIME type matching DEFAULT_COMPRESS_MIME_TYPES Default MIME types for compression
Includes common text-based content types that benefit from compression DEFAULT_COMPRESS_MIN_SIZE Default minimum file size for compression (in bytes)
Files smaller than 1000 bytes typically don’t benefit from compression
and the compression overhead may outweigh the benefits DEFAULT_CONSOLE_ADDRESS Default address for rustfs console
This is the default address for rustfs console.
This is used to bind the console server to a specific address.
Default value: :9001 DEFAULT_CONSOLE_AUTH_TIMEOUT Default console authentication timeout in seconds
This is the default timeout for console authentication sessions.
After this timeout, users need to re-authenticate to access the console.
Default value: 3600 seconds (1 hour)
Environment variable: RUSTFS_CONSOLE_AUTH_TIMEOUT
Command line argument: –console-auth-timeout
Example: RUSTFS_CONSOLE_AUTH_TIMEOUT=3600
Example: –console-auth-timeout 3600 DEFAULT_CONSOLE_CORS_ALLOWED_ORIGINS Default CORS allowed origins for the console service. DEFAULT_CONSOLE_ENABLE Default console enable
This is the default value for the console server.
It is used to enable or disable the console server.
Default value: true
Environment variable: RUSTFS_CONSOLE_ENABLE
Command line argument: –console-enable
Example: RUSTFS_CONSOLE_ENABLE=true
Example: –console-enable true DEFAULT_CONSOLE_PORT Default port for rustfs console
This is the default port for rustfs console. DEFAULT_CONSOLE_PREFIX Default embedded console URL path prefix. DEFAULT_CONSOLE_RATE_LIMIT_ENABLE Default console rate limit enable
This is the default value for enabling rate limiting on the console server.
Rate limiting helps protect against abuse and DoS attacks on the management interface.
Default value: false
Environment variable: RUSTFS_CONSOLE_RATE_LIMIT_ENABLE
Command line argument: –console-rate-limit-enable
Example: RUSTFS_CONSOLE_RATE_LIMIT_ENABLE=true
Example: –console-rate-limit-enable true DEFAULT_CONSOLE_RATE_LIMIT_RPM Default console rate limit requests per minute
This is the default rate limit for console requests when rate limiting is enabled.
Limits the number of requests per minute per client IP to prevent abuse.
Default value: 100 requests per minute
Environment variable: RUSTFS_CONSOLE_RATE_LIMIT_RPM
Command line argument: –console-rate-limit-rpm
Example: RUSTFS_CONSOLE_RATE_LIMIT_RPM=100
Example: –console-rate-limit-rpm 100 DEFAULT_CORS_ALLOWED_ORIGINS Default CORS allowed origins for the endpoint service
Empty means the S3 endpoint emits no generic CORS headers unless configured. DEFAULT_CPU_DURATION_SECS Duration of each CPU profiling session (for periodic mode) DEFAULT_CPU_FREQ Frequency of CPU profiling samples DEFAULT_CPU_INTERVAL_SECS Interval between CPU profiling sessions (for periodic mode) DEFAULT_CPU_MODE Legacy local CPU pprof mode DEFAULT_DATA_MOVEMENT_PART_CHECKSUMS_FLEET_CONFIRMED DEFAULT_DATA_MOVEMENT_PART_CHECKSUMS_WRITE DEFAULT_DELIMITER DEFAULT_DRIVE_ACTIVE_CHECK_INTERVAL_SECS DEFAULT_DRIVE_ACTIVE_CHECK_TIMEOUT_SECS DEFAULT_DRIVE_DISK_INFO_TIMEOUT_SECS DEFAULT_DRIVE_LIST_DIR_TIMEOUT_SECS DEFAULT_DRIVE_LONG_OFFLINE_THRESHOLD_SECS DEFAULT_DRIVE_MAX_TIMEOUT_DURATION_SECS Default timeout in seconds for the legacy global drive timeout fallback. DEFAULT_DRIVE_METADATA_TIMEOUT_SECS DEFAULT_DRIVE_OFFLINE_GRACE_PERIOD_SECS DEFAULT_DRIVE_RETURNING_PROBE_INTERVAL_SECS DEFAULT_DRIVE_RETURNING_SUCCESS_THRESHOLD DEFAULT_DRIVE_SUSPECT_FAILURE_THRESHOLD DEFAULT_DRIVE_TIMEOUT_HEALTH_ACTION DEFAULT_DRIVE_TIMEOUT_PROFILE DEFAULT_DRIVE_WALKDIR_PEEK_TIMEOUT_SECS DEFAULT_DRIVE_WALKDIR_STALL_TIMEOUT_SECS DEFAULT_DRIVE_WALKDIR_TIMEOUT_SECS DEFAULT_ENABLE_PROFILING Defaults for profiler settings DEFAULT_EVENT_INTERVAL Event polling default (Tokio default 61) DEFAULT_FAST_UPDATE_THRESHOLD_SECS Fast update threshold in seconds
Default: 120 seconds DEFAULT_FSYNC_BLOCKING_THREADS DEFAULT_FTPS_ADDRESS Default FTPS server bind address (FTP over TLS) DEFAULT_FTPS_EXTERNAL_IP Default FTPS external IP (auto-detected) DEFAULT_FTPS_PASSIVE_PORTS Default FTPS passive ports range (optional) DEFAULT_FTP_ADDRESS Default FTP server bind address (non-encrypted) DEFAULT_FTP_EXTERNAL_IP Default FTP external IP (auto-detected) DEFAULT_FTP_PASSIVE_PORTS Default FTP passive ports range (optional) DEFAULT_GLOBAL_QUEUE_INTERVAL DEFAULT_H2_INITIAL_CONN_WINDOW_SIZE DEFAULT_H2_INITIAL_STREAM_WINDOW_SIZE DEFAULT_H2_KEEP_ALIVE_INTERVAL DEFAULT_H2_KEEP_ALIVE_TIMEOUT DEFAULT_H2_MAX_CONCURRENT_STREAMS DEFAULT_H2_MAX_FRAME_SIZE DEFAULT_H2_MAX_HEADER_LIST_SIZE DEFAULT_HEALTH_CLUSTER_TIMEOUT_MS DEFAULT_HEALTH_COMPAT_BUSY_CHECK_ENABLE DEFAULT_HEALTH_COMPAT_BUSY_MAX_ACTIVE_REQUESTS DEFAULT_HEALTH_COMPAT_KMS_READY_CHECK_ENABLE DEFAULT_HEALTH_ENDPOINT_ENABLE DEFAULT_HEALTH_LOCK_ONLINE_TIMEOUT_MS DEFAULT_HEALTH_MINIMAL_RESPONSE_ENABLE DEFAULT_HEALTH_OBJECT_PROGRESS_ENABLE DEFAULT_HEALTH_OBJECT_PROGRESS_TIMEOUT_MS DEFAULT_HEALTH_PEER_READY_CHECK_ENABLE DEFAULT_HEALTH_READINESS_CACHE_TTL_MS DEFAULT_HEAL_AUTO_HEAL_ENABLE Default value for enabling authentication for heal operations if not specified in the environment variable. DEFAULT_HEAL_BITROT_CYCLE_SECS Default scanner-driven bitrot scan cycle used by heal/scanner runtime config. DEFAULT_HEAL_EVENT_DRIVEN_SCHEDULER_ENABLE Default behavior is to keep notify-driven scheduler wakeups enabled. DEFAULT_HEAL_INTERVAL_SECS Default heal interval in seconds if not specified in the environment variable. DEFAULT_HEAL_LOW_PRIORITY_DROP_WHEN_FULL Default behavior is to drop low-priority requests instead of blocking when the queue is full. DEFAULT_HEAL_LOW_PRIORITY_MERGE_ENABLE Default behavior is to merge duplicate low-priority requests. DEFAULT_HEAL_MAINLINE_MAX_SLEEP_MS Default foreground pressure recheck delay for heal scheduler, in milliseconds. DEFAULT_HEAL_MAINLINE_READ_UTILIZATION_HIGH_PERCENT Default foreground read permit utilization threshold for pausing best-effort heal task starts. DEFAULT_HEAL_MAINLINE_THROTTLE_ENABLE Default behavior is to pause best-effort heal task starts when foreground reads are saturated. DEFAULT_HEAL_MAINLINE_WRITE_UTILIZATION_HIGH_PERCENT Default foreground write utilization threshold for pausing best-effort heal task starts. DEFAULT_HEAL_MAX_CONCURRENT_HEALS Default maximum number of concurrent heal operations if not specified in the environment variable. DEFAULT_HEAL_MAX_CONCURRENT_PER_SET Default maximum number of concurrent heal operations per erasure set. DEFAULT_HEAL_MRF_ENABLE Default behavior keeps the MRF intent pipeline enabled. DEFAULT_HEAL_MRF_JOURNAL_MAX_BYTES Default MRF journal byte budget (8 MiB), mirroring the channel payload cap. DEFAULT_HEAL_MRF_QUEUE_SIZE Default MRF queue capacity (matches MinIO’s 100k MRF list ceiling). DEFAULT_HEAL_MRF_REPLAY_BATCH Default MRF replay batch size. DEFAULT_HEAL_OVERLAP_POLICY Default overlap policy: merge equivalent requests, reject overlapping scopes. DEFAULT_HEAL_PAGE_OBJECT_CONCURRENCY Default per-page object heal concurrency for erasure-set healing. DEFAULT_HEAL_PAGE_PARALLEL_ENABLE Default behavior is to keep erasure-set page parallelism enabled. DEFAULT_HEAL_QUEUE_SIZE Default heal queue size if not specified in the environment variable. DEFAULT_HEAL_SET_BULKHEAD_ENABLE Default behavior is to keep per-set bulkhead scheduling enabled. DEFAULT_HEAL_TASK_TIMEOUT_SECS Default heal task timeout in seconds if not specified in the environment variable. DEFAULT_HTTP1_HEADER_READ_TIMEOUT DEFAULT_HTTP1_MAX_BUF_SIZE DEFAULT_HTTP_REQUEST_BODY_READ_TIMEOUT DEFAULT_HTTP_SOCKET_RECV_BUFFER_BYTES DEFAULT_ILM_DAY_SECS Number of seconds in one lifecycle “day” (86400) used as the default when
ENV_ILM_DEBUG_DAY_SECS DEFAULT_ILM_PROCESS_TIME_SECS Default ILM process boundary in seconds (24h). DEFAULT_INTERNODE_BULK_CHANNELS DEFAULT_INTERNODE_CHANNEL_ISOLATION DEFAULT_INTERNODE_CONNECT_TIMEOUT_SECS DEFAULT_INTERNODE_DATA_TRANSPORT DEFAULT_INTERNODE_HTTP2_KEEPALIVE_INTERVAL_SECS DEFAULT_INTERNODE_HTTP2_KEEPALIVE_TIMEOUT_SECS DEFAULT_INTERNODE_HTTP_TUNING_PROFILE DEFAULT_INTERNODE_IDEMPOTENT_READ_RETRIES DEFAULT_INTERNODE_OFFLINE_BYPASS DEFAULT_INTERNODE_OFFLINE_FAILURE_THRESHOLD DEFAULT_INTERNODE_OFFLINE_REPROBE_SECS DEFAULT_INTERNODE_PREWARM DEFAULT_INTERNODE_RPC_BODY_DIGEST_STRICT DEFAULT_INTERNODE_RPC_HTTP2_CONN_WINDOW_SIZE DEFAULT_INTERNODE_RPC_HTTP2_STREAM_WINDOW_SIZE DEFAULT_INTERNODE_RPC_LARGE_PAYLOAD_WARN_BYTES DEFAULT_INTERNODE_RPC_MSGPACK_ONLY DEFAULT_INTERNODE_RPC_MSGPACK_ONLY_FLEET_CONFIRMED DEFAULT_INTERNODE_RPC_REPLAY_CACHE_CAPACITY DEFAULT_INTERNODE_RPC_REPLAY_SCOPE_STRICT DEFAULT_INTERNODE_RPC_SIGNATURE_STRICT DEFAULT_INTERNODE_RPC_TCP_NODELAY DEFAULT_INTERNODE_RPC_TIMEOUT_SECS DEFAULT_INTERNODE_TCP_KEEPALIVE_SECS DEFAULT_KMS_BACKEND Default KMS backend for server-side encryption
This is the default KMS backend for server-side encryption.
Default value: local DEFAULT_KMS_ENABLE Default KMS enable for server-side encryption
This is the default value for enabling KMS encryption for server-side encryption.
Default value: false DEFAULT_KMS_ENFORCE_SSE_KEY_POLICY Default per-key KMS authorization mode for the SSE-KMS data path. DEFAULT_LIMIT DEFAULT_LOG_DIR Default log directory for rustfs
This is the default log directory for rustfs.
It is used to store the logs of the application.
Default value: logs
Environment variable: RUSTFS_LOG_DIRECTORY DEFAULT_LOG_FILENAME Default log filename for rustfs
This is the default log filename for rustfs.
It is used to store the logs of the application.
Default value: rustfs.log
Environment variable: RUSTFS_OBS_LOG_FILENAME DEFAULT_LOG_KEEP_FILES Default log keep files for rustfs
This is the default log keep files for rustfs.
It is used to keep the logs of the application.
Default value: 30
Environment variable: RUSTFS_OBS_LOG_KEEP_FILES DEFAULT_LOG_LEVEL Default configuration logger level
Default value: error
Environment variable: RUSTFS_OBS_LOGGER_LEVEL DEFAULT_LOG_ROTATION_SIZE_MB Default log rotation size mb for rustfs
This is the default log rotation size for rustfs.
It is used to rotate the logs of the application.
Default value: 100 MB
Environment variable: RUSTFS_OBS_LOG_ROTATION_SIZE_MB DEFAULT_LOG_ROTATION_TIME Default log rotation time for rustfs
This is the default log rotation time for rustfs.
It is used to rotate the logs of the application.
Default value: hour, eg: daily,hourly,minutely
Environment variable: RUSTFS_OBS_LOG_ROTATION_TIME DEFAULT_MAX_BLOCKING_THREADS DEFAULT_MAX_FILES_THRESHOLD Maximum files threshold for sampling
Default: 200,000 files DEFAULT_MAX_IO_EVENTS_PER_TICK DEFAULT_MEM_INTERVAL_SECS Interval between memory profiling snapshots (for periodic mode) DEFAULT_MEM_PERIODIC Periodic memory pprof dumps (currently unsupported with mimalloc) DEFAULT_NOTIFY_ENABLE Default global notify switch (disabled by default). DEFAULT_OBJECT_BACKPRESSURE_HIGH_WATERMARK Default high watermark: 80%. DEFAULT_OBJECT_BACKPRESSURE_LOW_WATERMARK Default low watermark: 50%. DEFAULT_OBJECT_BYTES_PER_SECOND Default bytes per second for timeout estimation: 1 MB/s. DEFAULT_OBJECT_DEADLOCK_CHECK_INTERVAL Default deadlock check interval: 5 seconds. DEFAULT_OBJECT_DEADLOCK_DETECTION_ENABLE Default: deadlock detection is disabled for performance. DEFAULT_OBJECT_DEADLOCK_HANG_THRESHOLD Default hang threshold: 10 seconds. DEFAULT_OBJECT_DISK_DEGRADED_READ_CAP Size of the bounded degraded disk-read admission lane. DEFAULT_OBJECT_DISK_PERMIT_WAIT_TIMEOUT Maximum time a GET request waits for a primary disk read permit (seconds). DEFAULT_OBJECT_DISK_READ_TIMEOUT Default disk read timeout in seconds. DEFAULT_OBJECT_DISK_WRITE_ABSOLUTE_CAP Default absolute per-object erasure write cap in seconds (0 = disabled). DEFAULT_OBJECT_DISK_WRITE_STALL_TIMEOUT Default per-shard erasure write stall timeout in seconds. DEFAULT_OBJECT_DUPLEX_BUFFER_SIZE Default duplex buffer size: 4 MB. DEFAULT_OBJECT_DYNAMIC_TIMEOUT_ENABLE Default: dynamic timeout calculation is enabled. DEFAULT_OBJECT_FILE_CACHE_RECLAIM_READ_ENABLE DEFAULT_OBJECT_FILE_CACHE_RECLAIM_THRESHOLD DEFAULT_OBJECT_FILE_CACHE_RECLAIM_WRITE_ENABLE DEFAULT_OBJECT_GET_SKIP_BITROT_VERIFY Default: bitrot verification is enabled on GetObject reads (do not skip). DEFAULT_OBJECT_GET_TIMEOUT Default GetObject request timeout in seconds. DEFAULT_OBJECT_HIGH_CONCURRENCY_THRESHOLD Maximum concurrent requests before applying aggressive optimization. DEFAULT_OBJECT_IO_BANDWIDTH_EMA_BETA Default bandwidth EMA beta: 0.1. DEFAULT_OBJECT_IO_BANDWIDTH_HIGH_THRESHOLD_BPS Default high bandwidth threshold: 512 MiB/s. DEFAULT_OBJECT_IO_BANDWIDTH_LOW_THRESHOLD_BPS Default low bandwidth threshold: 64 MiB/s. DEFAULT_OBJECT_IO_BUFFER_SIZE Default I/O buffer size: 128 KB. DEFAULT_OBJECT_IO_HDD_BUFFER_CAP Default HDD buffer cap: 512 KiB. DEFAULT_OBJECT_IO_HIGH_PRIORITY_SIZE_THRESHOLD Default high priority size threshold: 1 MB. DEFAULT_OBJECT_IO_LOAD_HIGH_THRESHOLD_MS Default high load threshold: 50 ms. DEFAULT_OBJECT_IO_LOAD_LOW_THRESHOLD_MS Default low load threshold: 10 ms. DEFAULT_OBJECT_IO_LOAD_SAMPLE_WINDOW Default load sampling window: 100 samples. DEFAULT_OBJECT_IO_LOW_PRIORITY_SIZE_THRESHOLD Default low priority size threshold: 10 MB. DEFAULT_OBJECT_IO_NVME_BUFFER_CAP Default NVMe buffer cap: 2 MiB. DEFAULT_OBJECT_IO_PATTERN_HISTORY_SIZE Default access-pattern history size: 8 samples. DEFAULT_OBJECT_IO_QUEUE_HIGH_CAPACITY Default high priority queue capacity: 32. DEFAULT_OBJECT_IO_QUEUE_LOW_CAPACITY Default low priority queue capacity: 16. DEFAULT_OBJECT_IO_QUEUE_NORMAL_CAPACITY Default normal priority queue capacity: 64. DEFAULT_OBJECT_IO_RANDOM_READAHEAD_DISABLE_CONCURRENCY Default read-ahead disable concurrency threshold: 4. DEFAULT_OBJECT_IO_SEQUENTIAL_STEP_TOLERANCE_BYTES Default sequential step tolerance: 128 KiB. DEFAULT_OBJECT_IO_SSD_BUFFER_CAP Default SSD buffer cap: 1 MiB. DEFAULT_OBJECT_IO_STARVATION_PREVENTION_INTERVAL Default starvation prevention interval: 100 ms. DEFAULT_OBJECT_IO_STARVATION_THRESHOLD_SECS Default starvation threshold: 5 seconds. DEFAULT_OBJECT_IO_STORAGE_DETECTION_ENABLE Default storage media detection setting: enabled. DEFAULT_OBJECT_IO_STORAGE_MEDIA_OVERRIDE Default storage media override: no override. DEFAULT_OBJECT_LOCK_ACQUIRE_TIMEOUT Default lock acquisition timeout: 5 seconds. DEFAULT_OBJECT_LOCK_DIAG_ENABLE Default: object lock diagnostics are disabled. DEFAULT_OBJECT_LOCK_DIAG_SLOW_ACQUIRE_MS Default slow object lock acquisition threshold: 500 milliseconds. DEFAULT_OBJECT_LOCK_DIAG_SLOW_HOLD_MS Default long object lock hold threshold: 1000 milliseconds. DEFAULT_OBJECT_LOCK_OPTIMIZATION_ENABLE Default: lock optimization is enabled. DEFAULT_OBJECT_LOCK_RPC_DETACHED_LIMIT Default per-peer budget of detached (timed-out but still running) lock RPCs: 256. DEFAULT_OBJECT_LOCK_RPC_EVICTION_COOLDOWN_MS Default minimum interval between lock RPC channel evictions per peer: 5000 milliseconds. DEFAULT_OBJECT_LOCK_RPC_REQUEST_LIMIT Default per-peer in-flight lock acquisition RPC admission limit. DEFAULT_OBJECT_LOCK_RPC_TIMEOUT_MS Default remote lock RPC transport timeout: 3000 milliseconds. DEFAULT_OBJECT_MAX_CONCURRENT_DISK_READS Maximum concurrent disk reads for object operations.
Limits the number of simultaneous disk read operations to prevent I/O saturation. DEFAULT_OBJECT_MAX_TIMEOUT Default maximum GetObject timeout: 300 seconds (5 minutes). DEFAULT_OBJECT_MEDIUM_CONCURRENCY_THRESHOLD Medium concurrency threshold for buffer size adjustment. DEFAULT_OBJECT_MIN_TIMEOUT Default minimum GetObject timeout: 5 seconds. DEFAULT_OBJECT_MMAP_READ_ENABLE Default: mmap-based reads are enabled. DEFAULT_OBJECT_MMAP_READ_MAX_LENGTH Default mmap-copy read length cap: 32 MiB per shard read. DEFAULT_OBJECT_PRIORITY_SCHEDULING_ENABLE Default: priority scheduling is enabled. DEFAULT_OBJECT_SEEK_SUPPORT_THRESHOLD DEFAULT_OBJECT_TRANSACTION_FENCING_FLEET_CONFIRMED DEFAULT_OBJECT_TRANSACTION_FENCING_WRITE DEFAULT_OBJECT_ZERO_COPY_ENABLE Deprecated compatibility alias for mmap-based read default. DEFAULT_OBS_ENDPOINT Default OBS configuration endpoint
Environment variable: DEFAULT_OBS_ENDPOINT
Command line argument: –obs-endpoint
Example: DEFAULT_OBS_ENDPOINT=“http://localost:4318”
Example: –obs-endpoint http://localost:4318 DEFAULT_OBS_LOGS_EXPORT_ENABLED Default logs export enabled
It is used to enable or disable exporting logs
Default value: true
Environment variable: RUSTFS_OBS_LOGS_EXPORT_ENABLED DEFAULT_OBS_LOG_FILENAME Default OBS log filename for rustfs
This is the default log filename for OBS.
It is used to store the logs of the application.
Default value: rustfs.log DEFAULT_OBS_LOG_STDOUT_ENABLED Default log local logging enabled for rustfs
This is the default log local logging enabled for rustfs.
It is used to enable or disable local logging of the application.
Default value: false
Environment variable: RUSTFS_OBS_LOG_STDOUT_ENABLED DEFAULT_OBS_METRICS_EXPORT_ENABLED Default metrics export enabled
It is used to enable or disable exporting metrics
Default value: true
Environment variable: RUSTFS_OBS_METRICS_EXPORT_ENABLED DEFAULT_OBS_PROFILING_EXPORT_ENABLED Default profiling export enabled
It is used to enable or disable exporting profiles
Default value: true
Environment variable: RUSTFS_OBS_PROFILING_EXPORT_ENABLED DEFAULT_OBS_PUT_STAGE_METRICS_ENABLED Default detailed PUT stage metrics enabled
Default value: false
Environment variable: RUSTFS_OBS_PUT_STAGE_METRICS_ENABLED DEFAULT_OBS_TRACES_EXPORT_ENABLED Default trace export enabled
It is used to enable or disable exporting traces
Default value: true
Environment variable: RUSTFS_OBS_TRACES_EXPORT_ENABLED DEFAULT_OUTPUT_DIR Output directory DEFAULT_POOL_META_V2_FLEET_CONFIRMED DEFAULT_POOL_META_V2_WRITE DEFAULT_POOL_META_V3_FLEET_CONFIRMED DEFAULT_POOL_META_V3_WRITE DEFAULT_PORT Default port for rustfs
This is the default port for rustfs.
This is used to bind the server to a specific port. DEFAULT_PUT_COMMIT_NAMESPACE_LOCK_ACQUIRE_TIMEOUT_MS Default: PUT commit namespace lock acquire timeout override is disabled. DEFAULT_PUT_FOREGROUND_ADMISSION_ENABLE DEFAULT_PUT_FOREGROUND_ADMISSION_LIMIT DEFAULT_PUT_FOREGROUND_ADMISSION_WAIT_TIMEOUT_MS DEFAULT_PUT_LARGE_FOREGROUND_ADMISSION_ENABLE DEFAULT_PUT_LARGE_FOREGROUND_ADMISSION_LIMIT DEFAULT_PUT_LARGE_FOREGROUND_ADMISSION_MIN_SIZE_BYTES DEFAULT_PUT_LARGE_FOREGROUND_ADMISSION_WAIT_TIMEOUT_MS DEFAULT_PUT_MULTIPART_FOREGROUND_ADMISSION_MAX_PENDING DEFAULT_PUT_MULTIPART_FOREGROUND_ADMISSION_MIN_SIZE_BYTES DEFAULT_PUT_MULTIPART_FOREGROUND_ADMISSION_WAIT_TIMEOUT_MS DEFAULT_RNG_SEED DEFAULT_RUNTIME_DIAL9_ENABLED DEFAULT_RUNTIME_DIAL9_FILE_PREFIX DEFAULT_RUNTIME_DIAL9_MAX_FILE_SIZE DEFAULT_RUNTIME_DIAL9_OUTPUT_DIR DEFAULT_RUNTIME_DIAL9_ROTATION_COUNT DEFAULT_RUSTFS_TLS_PATH Default value for the server TLS path if ENV_RUSTFS_TLS_PATH is not set. DEFAULT_RUSTFS_UNSUPPORTED_FS_POLICY DEFAULT_SAMPLE_RATE Sampling rate (1 in every N files)
Default: 200 DEFAULT_SCANNER_ALERT_EXCESS_FOLDERS Default subfolder count that triggers scanner alerts.
Allows Proxmox Backup Server’s chunk namespace layout. DEFAULT_SCANNER_ALERT_EXCESS_VERSIONS Default object version count that triggers scanner alerts. DEFAULT_SCANNER_ALERT_EXCESS_VERSION_SIZE Default cumulative object version bytes that trigger scanner alerts. DEFAULT_SCANNER_BITROT_CYCLE_SECS Default bitrot scan cycle used by the scanner. DEFAULT_SCANNER_CACHE_SAVE_TIMEOUT_SECS Default scanner cache save timeout in seconds. DEFAULT_SCANNER_CYCLE_MAX_DIRECTORIES Default scanner per-cycle directory budget.
0 keeps the existing unbounded per-cycle behavior. DEFAULT_SCANNER_CYCLE_MAX_DURATION_SECS Default scanner cycle runtime budget when no override is configured. DEFAULT_SCANNER_CYCLE_MAX_OBJECTS Default scanner per-cycle object budget.
0 keeps the existing unbounded per-cycle behavior. DEFAULT_SCANNER_IDLE_MODE Default scanner idle mode. DEFAULT_SCANNER_MAX_CONCURRENT_DISK_SCANS Default disk scan concurrency budget. DEFAULT_SCANNER_MAX_CONCURRENT_SET_SCANS Default set scan concurrency budget. DEFAULT_SCANNER_SPEED Default scanner speed preset. DEFAULT_SCANNER_YIELD_EVERY_N_OBJECTS Default object interval for cooperative scanner yields. DEFAULT_SCHEDULED_UPDATE_INTERVAL_SECS Scheduled update interval in seconds
Default: 600 seconds (10 minutes) DEFAULT_SERVER_MTLS_ENABLE Default value for enabling server mTLS
By default, RustFS server mTLS is disabled.
To change this behavior, set the environment variable RUSTFS_SERVER_MTLS_ENABLE=1 DEFAULT_SFTP_ADDRESS Default SFTP server bind address. DEFAULT_SFTP_BANNER Default SSH identification string (no version disclosure). DEFAULT_SFTP_HOST_KEY_DIR Default for SFTP host-key directory. None means no default. Operators
must set RUSTFS_SFTP_HOST_KEY_DIR explicitly when SFTP is enabled. DEFAULT_SFTP_HOST_KEY_RELOAD_ENABLE Default SFTP host key hot reload enabled state. DEFAULT_SFTP_HOST_KEY_RELOAD_INTERVAL Default SFTP host key hot reload interval in seconds. DEFAULT_SFTP_IDLE_TIMEOUT Default idle session timeout in seconds. DEFAULT_SFTP_PART_SIZE Default S3 multipart upload part size in bytes (16 MiB). DEFAULT_SFTP_READ_ONLY Default read-only mode (disabled). DEFAULT_SHARD_INTEGRITY_FLEET_CONFIRMED DEFAULT_SHARD_INTEGRITY_WRITE DEFAULT_SNOWBALL_MAX_ENTRY_BYTES DEFAULT_SNOWBALL_MAX_UNPACKED_BYTES DEFAULT_STARTUP_READINESS_MAX_WAIT_SECS DEFAULT_STARTUP_TOPOLOGY_RETRY_MAX_DELAY_SECS Default per-attempt backoff cap (seconds) while retrying startup
topology/DNS convergence. DEFAULT_STARTUP_TOPOLOGY_WAIT_TIMEOUT_SECS Default bounded-mode wait window (seconds) for non-Kubernetes distributed
deployments before startup topology convergence is declared failed. DEFAULT_STAT_TIMEOUT_SECS Statistics timeout in seconds
Default: 3 seconds DEFAULT_TARGET_STORE_COMPRESS Queue-store compression is enabled by default to reduce disk footprint. DEFAULT_THREAD_KEEP_ALIVE DEFAULT_THREAD_NAME DEFAULT_THREAD_PRINT_ENABLED DEFAULT_THREAD_STACK_SIZE DEFAULT_TIER_REMOTE_CONNECT_TIMEOUT_SECS Default remote tier TCP connect timeout in seconds. DEFAULT_TIER_REMOTE_REQUEST_TIMEOUT_SECS Default remote tier request timeout in seconds. DEFAULT_TIER_REMOTE_RESPONSE_BODY_IDLE_TIMEOUT_SECS Default remote tier response-body idle timeout in seconds. DEFAULT_TIER_REMOTE_VERSION_STATE_FLEET_CONFIRMED DEFAULT_TIER_REMOTE_VERSION_STATE_WRITE DEFAULT_TLS_KEYLOG Default value for TLS key logging
By default, RustFS does not log TLS keys.
To change this behavior, set the environment variable RUSTFS_TLS_KEYLOG=1 DEFAULT_TLS_RELOAD_ENABLE Default value for TLS certificate hot reload
By default, RustFS does not reload TLS certificates automatically. DEFAULT_TLS_RELOAD_INTERVAL Default interval for TLS certificate reload check DEFAULT_TRANSITION_QUEUE_CAPACITY Default capacity for the transition queue. DEFAULT_TRANSITION_QUEUE_SEND_TIMEOUT_MS Default send timeout for transition queue enqueue attempts, in milliseconds. DEFAULT_TRANSITION_WORKERS_ABSOLUTE_MAX Absolute upper bound for transition workers accepted from runtime env. DEFAULT_TRANSITION_WORKERS_CAP Maximum transition workers used as a local fallback when runtime env is unset. DEFAULT_TRUSTED_PROXIES_LOG_LEVEL Default log level is “info”. DEFAULT_TRUSTED_PROXY_CACHE_CAPACITY Default cache capacity is 10,000 entries. DEFAULT_TRUSTED_PROXY_CACHE_CLEANUP_INTERVAL Default cleanup interval is 60 seconds. DEFAULT_TRUSTED_PROXY_CACHE_TTL_SECONDS Default cache TTL is 300 seconds (5 minutes). DEFAULT_TRUSTED_PROXY_CHAIN_CONTINUITY_CHECK Continuity checks are enabled by default. DEFAULT_TRUSTED_PROXY_CLOUDFLARE_IPS_ENABLED Cloudflare integration is disabled by default. DEFAULT_TRUSTED_PROXY_CLOUD_METADATA_ENABLED Cloud metadata discovery is disabled by default. DEFAULT_TRUSTED_PROXY_CLOUD_METADATA_TIMEOUT Default cloud metadata timeout is 5 seconds. DEFAULT_TRUSTED_PROXY_CLOUD_PROVIDER_FORCE No forced provider by default. DEFAULT_TRUSTED_PROXY_ENABLED Trusted proxy middleware is enabled by default. DEFAULT_TRUSTED_PROXY_ENABLE_RFC7239 RFC 7239 support is enabled by default. DEFAULT_TRUSTED_PROXY_EXTRA_PROXIES No extra trusted networks by default. DEFAULT_TRUSTED_PROXY_IMPLEMENTATION The simplified implementation is used by default. DEFAULT_TRUSTED_PROXY_IPS No individual trusted IPs by default. DEFAULT_TRUSTED_PROXY_LOG_FAILED_VALIDATIONS Logging of failed validations is enabled by default. DEFAULT_TRUSTED_PROXY_MAX_HOPS Default maximum hops is 10. DEFAULT_TRUSTED_PROXY_METRICS_ENABLED Metrics are enabled by default. DEFAULT_TRUSTED_PROXY_PRIVATE_NETWORKS Default private networks include common RFC 1918 and RFC 4193 ranges. DEFAULT_TRUSTED_PROXY_PROXIES Default trusted networks are loopback-only. Private/RFC1918 ranges are not
trusted by default: an operator must explicitly add the specific proxy
addresses in front of this server to have forwarding headers honored. DEFAULT_TRUSTED_PROXY_STRUCTURED_LOGGING Structured logging is disabled by default. DEFAULT_TRUSTED_PROXY_TRACING_ENABLED Tracing is enabled by default. DEFAULT_TRUSTED_PROXY_VALIDATION_MODE Default validation mode is “hop_by_hop”. DEFAULT_TRUST_LEAF_CERT_AS_CA Default value for trusting leaf certificates as CA
By default, RustFS does not trust leaf certificates as CA.
To change this behavior, set the environment variable RUSTFS_TRUST_LEAF_CERT_AS_CA=1 DEFAULT_TRUST_SYSTEM_CA Default value for trusting system CA certificates
By default, RustFS does not trust system CA certificates.
To change this behavior, set the environment variable RUSTFS_TRUST_SYSTEM_CA=1 DEFAULT_UNSAFE_BYPASS_DISK_CHECK Default flag value for bypassing local physical disk independence checks. DEFAULT_UPDATE_CHECK Default value for update toggle DEFAULT_WEBDAV_ADDRESS Default WebDAV server bind address DEFAULT_WORKER_THREADS DEFAULT_WRITE_FREQUENCY_THRESHOLD Write frequency threshold (writes per minute)
Default: 20 writes/minute DEFAULT_WRITE_TRIGGER_DELAY_SECS Write trigger delay in seconds
Default: 30 seconds DRIVE_TIMEOUT_HEALTH_ACTION_IGNORE_SCANNER DRIVE_TIMEOUT_HEALTH_ACTION_MARK_FAILURE DRIVE_TIMEOUT_PROFILE_DEFAULT DRIVE_TIMEOUT_PROFILE_HIGH_LATENCY DRIVE_TIMEOUT_PROFILE_HIGH_LATENCY_SECS Timeout preset (seconds) used when RUSTFS_DRIVE_TIMEOUT_PROFILE=high_latency
and no per-operation timeout override is provided. ENABLE_KEY Standard config keys and values. ENVIRONMENT Default configuration environment
Default value: production ENV_ADMIN_PEER_PROBE_TIMEOUT_SECS Total budget for one admin peer probe round, including any reconnect retry. ENV_ALLOCATOR_RECLAIM_ENABLED ENV_ALLOCATOR_RECLAIM_FORCE ENV_ALLOCATOR_RECLAIM_IDLE_INTERVALS ENV_ALLOCATOR_RECLAIM_INTERVAL_SECS ENV_API_MAX_CONNECTIONS Maximum concurrently served connections on the main API listener. ENV_API_OBJECT_MAX_VERSIONS Maximum retained versions per object. ENV_API_RATE_LIMIT_BUCKET_BURST Burst capacity per bucket (maximum tokens in the bucket-dimension bucket). ENV_API_RATE_LIMIT_BUCKET_RPM Sustained S3 API request budget per addressed bucket, in requests per
minute — a collective ceiling shared by all clients of that bucket. ENV_API_RATE_LIMIT_BURST Burst capacity per client IP (maximum tokens in the bucket). ENV_API_RATE_LIMIT_ENABLE Enable or disable per-client rate limiting for the S3 API. ENV_API_RATE_LIMIT_RPM Sustained S3 API request budget per client IP, in requests per minute. ENV_AUDIT_ENABLE Global switch for enabling the audit module. ENV_BUCKET_CONFIG_PARSE_MODE How object writes treat a bucket whose stored versioning configuration
cannot be parsed: permissive writes as if unversioned (the historical
behavior, recorded by metrics and an error log) and strict refuses the
write with 503. Paths that already refuse an unreadable configuration do
so in both modes. Any other value fails startup. ENV_CAPACITY_ENABLE_DYNAMIC_TIMEOUT Environment variable for enabling dynamic timeout calculation ENV_CAPACITY_FAST_UPDATE_THRESHOLD Environment variable for fast update threshold ENV_CAPACITY_FOLLOW_SYMLINKS Environment variable for following symbolic links during capacity calculation ENV_CAPACITY_MAX_FILES_THRESHOLD Environment variable for max files threshold ENV_CAPACITY_MAX_TIMEOUT Environment variable for maximum capacity calculation timeout ENV_CAPACITY_METRICS_INTERVAL Environment variable for metrics logging interval ENV_CAPACITY_MIN_TIMEOUT Environment variable for minimum capacity calculation timeout ENV_CAPACITY_SAMPLE_RATE Environment variable for sample rate ENV_CAPACITY_SCHEDULED_INTERVAL Environment variable for scheduled update interval ENV_CAPACITY_STAT_TIMEOUT Environment variable for statistics timeout ENV_CAPACITY_WRITE_FREQUENCY_THRESHOLD Environment variable for write frequency threshold ENV_CAPACITY_WRITE_TRIGGER_DELAY Environment variable for write trigger delay ENV_COMPRESS_ENABLE Environment variable to enable/disable HTTP response compression
Default: off (disabled)
Values: on, off, true, false, yes, no, 1, 0
Example: RUSTFS_COMPRESS_ENABLE=on ENV_COMPRESS_EXTENSIONS Environment variable for file extensions that should be compressed
Comma-separated list of file extensions (with or without leading dot)
Default: “” (empty, meaning use MIME type matching only)
Example: RUSTFS_COMPRESS_EXTENSIONS=.txt,.log,.csv,.json,.xml,.html,.css,.js ENV_COMPRESS_MIME_TYPES Environment variable for MIME types that should be compressed
Comma-separated list of MIME types, supports wildcard () for subtypes
Default: “text/ ,application/json,application/xml,application/javascript”
Example: RUSTFS_COMPRESS_MIME_TYPES=text/*,application/json,application/xml ENV_COMPRESS_MIN_SIZE Environment variable for minimum file size to apply compression
Files smaller than this size will not be compressed
Default: 1000 (bytes)
Example: RUSTFS_COMPRESS_MIN_SIZE=1000 ENV_CONSOLE_ADDRESS Address for the console service to bind to ENV_CONSOLE_AUTH_TIMEOUT Set the console authentication timeout in seconds
Specifies how long a console authentication session remains valid
Default: 3600 seconds (1 hour)
Minimum: 300 seconds (5 minutes)
Maximum: 86400 seconds (24 hours) ENV_CONSOLE_CORS_ALLOWED_ORIGINS CORS allowed origins for the console service
Comma-separated list of origins or “*” for all origins ENV_CONSOLE_ENABLE Enable or disable the console service ENV_CONSOLE_RATE_LIMIT_ENABLE RUSTFS_CONSOLE_RATE_LIMIT_ENABLE
Enable or disable rate limiting for the console service ENV_CONSOLE_RATE_LIMIT_RPM Set the rate limit requests per minute for the console service
Limits the number of requests per minute per client IP when rate limiting is enabled
Default: 100 requests per minute ENV_CORS_ALLOWED_ORIGINS CORS allowed origins for the endpoint service
Comma-separated list of origins or “*” for all origins ENV_CPU_DURATION_SECS Duration of each CPU profiling session (for periodic mode) ENV_CPU_FREQ Frequency of CPU profiling samples ENV_CPU_INTERVAL_SECS Interval between CPU profiling sessions (for periodic mode) ENV_CPU_MODE ENV_DATA_MOVEMENT_PART_CHECKSUMS_FLEET_CONFIRMED Operator-attested confirmation that every serving node understands the
data-movement per-part checksum sidecar. ENV_DATA_MOVEMENT_PART_CHECKSUMS_WRITE Request preserving legacy per-part checksum metadata during data movement. ENV_DATA_SCANNER_START_DELAY_SECS Deprecated Deprecated compatibility alias for scanner start delay.
Prefer RUSTFS_SCANNER_START_DELAY_SECS. ENV_DRIVE_ACTIVE_CHECK_INTERVAL_SECS Interval in seconds between active health probes for local and remote drives. ENV_DRIVE_ACTIVE_CHECK_TIMEOUT_SECS Timeout in seconds for a single active health probe. ENV_DRIVE_DISK_INFO_TIMEOUT_SECS Timeout for disk_info() calls on local and remote drives. ENV_DRIVE_LIST_DIR_TIMEOUT_SECS Timeout for list_dir() style metadata listing operations. ENV_DRIVE_LONG_OFFLINE_THRESHOLD_SECS Duration in seconds after which a recovered drive is classified as long offline. ENV_DRIVE_MAX_TIMEOUT_DURATION Legacy global drive timeout fallback.
Deprecated in favor of per-operation drive timeout knobs. ENV_DRIVE_METADATA_TIMEOUT_SECS Timeout for metadata-oriented drive operations such as read_metadata. ENV_DRIVE_OFFLINE_GRACE_PERIOD_SECS Duration in seconds for classifying a recovered drive as a short offline event. ENV_DRIVE_RETURNING_PROBE_INTERVAL_SECS Probe interval in seconds while a drive is in the recovery path. ENV_DRIVE_RETURNING_SUCCESS_THRESHOLD Number of consecutive successful recovery probes before a returning drive is considered online again. ENV_DRIVE_SUSPECT_FAILURE_THRESHOLD Number of consecutive failures before a suspect drive is classified as offline. ENV_DRIVE_TIMEOUT_HEALTH_ACTION Timeout-to-health transition policy for drive operations. ENV_DRIVE_TIMEOUT_PROFILE Drive timeout profile preset. ENV_DRIVE_WALKDIR_PEEK_TIMEOUT_SECS Maximum time the metacache merge consumer waits for the next visible
walk_dir() entry from a reader before detaching it from the merge. ENV_DRIVE_WALKDIR_STALL_TIMEOUT_SECS Maximum time without forward progress while consuming a walk_dir() stream. ENV_DRIVE_WALKDIR_TIMEOUT_SECS Total timeout for walk_dir() operations. ENV_ENABLE_PROFILING Profiler related environment variable names and default values ENV_EVENT_INTERVAL Event polling interval ENV_FSYNC_BLOCKING_THREADS Dedicated blocking thread pool for fsync/fdatasync operations.
When > 1, fsync operations are isolated from the main blocking pool to
prevent device-bound fsync from starving read operations (pread/stat/open).
Default 64 isolates fsync from the main blocking pool to prevent device-bound fsync from starving read I/O. ENV_FTPS_ADDRESS ENV_FTPS_CA_FILE ENV_FTPS_CERTS_DIR ENV_FTPS_ENABLE ENV_FTPS_EXTERNAL_IP ENV_FTPS_PASSIVE_PORTS ENV_FTPS_TLS_ENABLED ENV_FTP_ADDRESS ENV_FTP_ENABLE Environment variable names ENV_FTP_EXTERNAL_IP ENV_FTP_PASSIVE_PORTS ENV_GLOBAL_QUEUE_INTERVAL ENV_H2_INITIAL_CONN_WINDOW_SIZE Environment variable for HTTP/2 initial connection window size (bytes)
Default: 8388608 (8 MB) ENV_H2_INITIAL_STREAM_WINDOW_SIZE Environment variable for HTTP/2 initial stream window size (bytes)
Default: 4194304 (4 MB) ENV_H2_KEEP_ALIVE_INTERVAL Environment variable for HTTP/2 keep-alive interval (seconds)
Default: 20 ENV_H2_KEEP_ALIVE_TIMEOUT Environment variable for HTTP/2 keep-alive timeout (seconds)
Default: 10 ENV_H2_MAX_CONCURRENT_STREAMS Environment variable for HTTP/2 max concurrent streams
Default: 2048 ENV_H2_MAX_FRAME_SIZE Environment variable for HTTP/2 max frame size (bytes)
Range: 16384 (16 KB) to 16777216 (16 MB) per RFC 7540
Default: 524288 (512 KB) ENV_H2_MAX_HEADER_LIST_SIZE Environment variable for HTTP/2 max header list size (bytes)
Default: 65536 (64 KB) ENV_HEALTH_CLUSTER_TIMEOUT_MS Timeout for cluster health readiness collectors (milliseconds).
This bounds expensive storage and lock quorum checks used by cluster probes. ENV_HEALTH_COMPAT_BUSY_CHECK_ENABLE Enable busy protection for health probes.
When enabled with a positive request threshold, alias health probes may
return 429 when active HTTP requests exceed the threshold. ENV_HEALTH_COMPAT_BUSY_MAX_ACTIVE_REQUESTS Max active HTTP requests; alias health probes report busy (429) when active requests reach or exceed this value.
Set to 0 to disable thresholding even when busy protection is enabled. ENV_HEALTH_COMPAT_KMS_READY_CHECK_ENABLE Enable KMS readiness check for alias readiness probes.
When enabled, /health/ready additionally requires KMS service to be
in running state if a global KMS manager exists. ENV_HEALTH_ENDPOINT_ENABLE Enable or disable public /health and /health/ready endpoints.
When disabled, the routes are not registered and return 404. ENV_HEALTH_LOCK_ONLINE_TIMEOUT_MS Timeout for one remote lock-client online check used by readiness (milliseconds). ENV_HEALTH_MINIMAL_RESPONSE_ENABLE Enable minimal health payload mode for GET /health* responses.
When enabled, only status and ready fields are returned. ENV_HEALTH_OBJECT_PROGRESS_ENABLE Enable readiness withdrawal when bounded object read/write stages stop
completing while requests remain active. ENV_HEALTH_OBJECT_PROGRESS_TIMEOUT_MS Requested time without completion in a bounded object stage before local
readiness is withdrawn (milliseconds). A value of 0 uses the default;
runtime adds a safety floor based on the object-lock acquisition timeout. ENV_HEALTH_PEER_READY_CHECK_ENABLE Enable peer-health readiness impact.
When disabled, peer-health state is reported but does not affect readiness. ENV_HEALTH_READINESS_CACHE_TTL_MS Cache TTL for storage readiness runtime-state evaluation (milliseconds).
This reduces storage-layer pressure when probes are called at high frequency. ENV_HEAL_AUTO_HEAL_ENABLE Environment variable name that enables or disables auto-heal functionality. ENV_HEAL_EVENT_DRIVEN_SCHEDULER_ENABLE Environment variable that toggles notify-driven scheduler wakeups. ENV_HEAL_INTERVAL_SECS Environment variable name that specifies the heal interval in seconds. ENV_HEAL_LOW_PRIORITY_DROP_WHEN_FULL Environment variable that allows low-priority heal requests to be dropped when the queue is full. ENV_HEAL_LOW_PRIORITY_MERGE_ENABLE Environment variable that controls whether low-priority heal requests should merge into
an existing queued request with the same deduplication key. ENV_HEAL_MAINLINE_MAX_SLEEP_MS Environment variable that controls how soon the heal scheduler rechecks foreground
pressure after delaying background work. ENV_HEAL_MAINLINE_READ_UTILIZATION_HIGH_PERCENT Environment variable that controls the foreground read permit utilization percentage
at which background heal work pauses starting new tasks. ENV_HEAL_MAINLINE_THROTTLE_ENABLE Environment variable that toggles foreground read pressure gating for background heal work. ENV_HEAL_MAINLINE_WRITE_UTILIZATION_HIGH_PERCENT Environment variable that controls the foreground write utilization percentage
at which background heal work pauses starting new tasks. ENV_HEAL_MAX_CONCURRENT_HEALS Environment variable name that specifies the maximum number of concurrent heal operations. ENV_HEAL_MAX_CONCURRENT_PER_SET Environment variable name that specifies the maximum number of concurrent heal operations
allowed for a single erasure set. ENV_HEAL_MRF_ENABLE Environment variable that toggles the MRF (mission repair feed) intent
pipeline: error paths deliver repair intents to the heal runtime, and
unconsumed intents are replayed from the durable journal after a restart. ENV_HEAL_MRF_JOURNAL_MAX_BYTES Environment variable for the MRF journal byte budget. The journal is
compacted once its on-disk size crosses this bound. ENV_HEAL_MRF_QUEUE_SIZE Environment variable for the MRF in-memory queue capacity (intent count). ENV_HEAL_MRF_REPLAY_BATCH Environment variable for the MRF journal replay batch size (intents per
replay push round). ENV_HEAL_OVERLAP_POLICY Environment variable selecting how admin heal starts behave when the
requested path overlaps an already running or queued heal: merge
(default, merge equivalent starts and reject other overlapping admin
scopes) or minio_error (also reject equivalent starts like madmin). ENV_HEAL_PAGE_OBJECT_CONCURRENCY Environment variable that controls concurrent object heals within a single erasure-set page. ENV_HEAL_PAGE_PARALLEL_ENABLE Environment variable that toggles page-level parallel object healing for erasure-set repair. ENV_HEAL_QUEUE_SIZE Environment variable name that specifies the heal queue size. ENV_HEAL_SET_BULKHEAD_ENABLE Environment variable that toggles per-set bulkhead scheduling. ENV_HEAL_TASK_TIMEOUT_SECS Environment variable name that specifies the heal task timeout in seconds. ENV_HTTP1_HEADER_READ_TIMEOUT Environment variable for HTTP/1.1 header read timeout (seconds)
Default: 75 ENV_HTTP1_MAX_BUF_SIZE Environment variable for HTTP/1.1 max buffer size (bytes)
Default: 65536 (64 KB) ENV_HTTP_REQUEST_BODY_READ_TIMEOUT Environment variable for the S3 request-body inter-chunk read timeout
(seconds). Default: 300. Set to 0 to disable. ENV_HTTP_SOCKET_RECV_BUFFER_BYTES Environment variable for a fixed kernel receive buffer (SO_RCVBUF, bytes)
on the API listener. Default: 0, which leaves the buffer to kernel
autotuning. ENV_ILM_DEBUG_DAY_SECS TEST/DEBUG ONLY — lifecycle “day” length override, in seconds.ENV_ILM_PROCESS_TIME Canonical ILM process boundary env key (seconds). ENV_ILM_PROCESS_TIME_DEPRECATED Deprecated ILM process boundary env key kept for compatibility. ENV_INTERNODE_BULK_CHANNELS Number of bulk channels maintained per peer when channel isolation is enabled. ENV_INTERNODE_CHANNEL_ISOLATION Enable control/bulk internode gRPC channel isolation. ENV_INTERNODE_CONNECT_TIMEOUT_SECS Timeout for establishing a new internode gRPC connection. ENV_INTERNODE_HTTP2_ADAPTIVE_WINDOW Whether internode HTTP/2 adaptive window sizing is enabled. ENV_INTERNODE_HTTP2_INITIAL_CONNECTION_WINDOW_SIZE Internode HTTP/2 initial connection window size in bytes. ENV_INTERNODE_HTTP2_INITIAL_STREAM_WINDOW_SIZE Internode HTTP/2 initial stream window size in bytes. ENV_INTERNODE_HTTP2_KEEPALIVE_INTERVAL_SECS HTTP/2 keepalive interval for internode gRPC channels. ENV_INTERNODE_HTTP2_KEEPALIVE_TIMEOUT_SECS HTTP/2 keepalive timeout for internode gRPC channels. ENV_INTERNODE_HTTP_POOL_IDLE_TIMEOUT_SECS Internode HTTP connection pool idle timeout in seconds. ENV_INTERNODE_HTTP_POOL_MAX_IDLE_PER_HOST Internode HTTP connection pool maximum idle connections per host. ENV_INTERNODE_HTTP_PROXY Internode HTTP proxy mode: legacy, off, or system. ENV_INTERNODE_HTTP_TUNING_PROFILE Profile selector for conservative internode HTTP data-plane client tuning. ENV_INTERNODE_IDEMPOTENT_READ_RETRIES Extra attempts for idempotent, read-only/reentrant control-plane and object-read RPCs
(DiskInfo, ReadAll, ReadMetadata, ReadVersion) on transient network failures, with
exponential backoff (grpc-optimization P3-3). ENV_INTERNODE_OFFLINE_BYPASS Fast-fail (bypass) internode RPCs to a peer already marked offline, instead of paying the connect
timeout, letting quorum proceed sooner (grpc-optimization P3-2). ENV_INTERNODE_OFFLINE_FAILURE_THRESHOLD Consecutive-failure threshold after which an internode peer is marked offline (grpc-optimization
P3 observability). ENV_INTERNODE_OFFLINE_REPROBE_SECS Re-probe interval (seconds) for the offline bypass: while a peer is offline, one request is let
through this often to attempt recovery. Clamped to a small minimum by callers. Defaults to 5s. ENV_INTERNODE_PREWARM Prewarm internode control channels in the background at remote-disk construction, moving the
connect cost off the first RPC (grpc-optimization P3-1). ENV_INTERNODE_RPC_BODY_DIGEST_STRICT Require a signature-bound canonical body digest on every mutating internode disk RPC
(RenameData, DeleteVersion, DeleteVersions, WriteMetadata, UpdateMetadata, WriteAll, Delete,
DeletePaths, RenameFile, RenamePart, DeleteVolume, MakeVolume, MakeVolumes), rejecting requests
that authenticate without one (https://github.com/rustfs/backlog/issues/1327 ). ENV_INTERNODE_RPC_HTTP2_CONN_WINDOW_SIZE HTTP/2 initial connection window size (bytes) for internode gRPC client channels. ENV_INTERNODE_RPC_HTTP2_STREAM_WINDOW_SIZE HTTP/2 initial stream window size (bytes) for internode gRPC client channels. ENV_INTERNODE_RPC_LARGE_PAYLOAD_WARN_BYTES Payload-size threshold (bytes) above which a unary internode gRPC response counts as a
“large payload” for alerting. ENV_INTERNODE_RPC_MAX_MESSAGE_SIZE Maximum encoded message size (bytes) for internode gRPC, applied to both the client
NodeServiceClient and the server NodeServiceServer. ENV_INTERNODE_RPC_MSGPACK_ONLY Request stopping the JSON compatibility strings on internode metadata RPCs and sending only the
msgpack _bin payloads (grpc-optimization P2-1). ENV_INTERNODE_RPC_MSGPACK_ONLY_FLEET_CONFIRMED Explicit fleet-wide confirmation gate for ENV_INTERNODE_RPC_MSGPACK_ONLY ENV_INTERNODE_RPC_REPLAY_CACHE_CAPACITY Capacity (distinct nonces) of the process-local internode RPC replay cache that enforces
one-time consumption of authenticated RPC signatures. ENV_INTERNODE_RPC_REPLAY_SCOPE_STRICT Require the replay-scoped internode RPC signature after the fleet has converged on it. ENV_INTERNODE_RPC_SIGNATURE_STRICT Require target-bound v2 signatures on every internode gRPC request, rejecting the legacy
constant-target fallback instead of accepting it (https://github.com/rustfs/backlog/issues/1327 ). ENV_INTERNODE_RPC_TCP_NODELAY Disable Nagle’s algorithm on internode gRPC client sockets. ENV_INTERNODE_RPC_TIMEOUT_SECS Overall timeout for a single internode gRPC request. ENV_INTERNODE_TCP_KEEPALIVE_SECS TCP keepalive interval for internode gRPC channels. ENV_KUBERNETES_SERVICE_HOST Environment variable injected into every Kubernetes pod; its presence marks
an orchestrated deployment for startup topology auto-detection. ENV_LOCAL_ENDPOINT_HOST Environment variable identifying this server’s host in distributed endpoint
lists without relying on DNS locality discovery. ENV_MAX_BLOCKING_THREADS ENV_MAX_EXPIRY_WORKERS Runtime env var controlling the ILM expiry worker count. A set, parsable,
non-zero value wins; anything else falls back to min(cpus, 16). ENV_MAX_IO_EVENTS_PER_TICK ENV_MEM_INTERVAL_SECS Interval between memory profiling snapshots (for periodic mode) ENV_MEM_PERIODIC Periodic memory pprof dumps (currently unsupported with mimalloc) ENV_MINIO_CI Compatibility alias used by legacy MinIO CI pipelines. ENV_MTLS_CLIENT_CERT Environment variable for client certificate file path
RUSTFS_MTLS_CLIENT_CERT
Specifies the file path to the client certificate used for mTLS authentication.
If not set, RustFS will look for the default filename “client_cert.pem” in the current directory.
To set, use the environment variable RUSTFS_MTLS_CLIENT_CERT=/path/to/client_cert.pem ENV_MTLS_CLIENT_KEY Environment variable for client private key file path
RUSTFS_MTLS_CLIENT_KEY
Specifies the file path to the client private key used for mTLS authentication.
If not set, RustFS will look for the default filename “client_key.pem” in the current directory.
To set, use the environment variable RUSTFS_MTLS_CLIENT_KEY=/path/to/client_key.pem ENV_NOTIFY_ENABLE Global switch for enabling the notify module. ENV_OBJECT_BACKPRESSURE_HIGH_WATERMARK Environment variable for backpressure high watermark percentage. ENV_OBJECT_BACKPRESSURE_LOW_WATERMARK Environment variable for backpressure low watermark percentage. ENV_OBJECT_BYTES_PER_SECOND Environment variable for default bytes per second for timeout estimation. ENV_OBJECT_DATA_CACHE_ENABLE Enables the in-memory object body cache, which serves whole-object GET
responses without an erasure read. ENV_OBJECT_DATA_CACHE_FILL_CONCURRENCY_MAX ENV_OBJECT_DATA_CACHE_FILL_CONCURRENCY_PER_CPU ENV_OBJECT_DATA_CACHE_IDENTITY_KEYS_MAX ENV_OBJECT_DATA_CACHE_MAX_BYTES ENV_OBJECT_DATA_CACHE_MAX_ENTRY_BYTES ENV_OBJECT_DATA_CACHE_MAX_MEMORY_PERCENT ENV_OBJECT_DATA_CACHE_MIN_FREE_MEMORY_PERCENT ENV_OBJECT_DATA_CACHE_MODE ENV_OBJECT_DATA_CACHE_TIME_TO_IDLE_SECS ENV_OBJECT_DATA_CACHE_TTL_SECS ENV_OBJECT_DEADLOCK_CHECK_INTERVAL Environment variable for deadlock detection check interval in seconds. ENV_OBJECT_DEADLOCK_DETECTION_ENABLE Environment variable to enable/disable deadlock detection. ENV_OBJECT_DEADLOCK_HANG_THRESHOLD Environment variable for deadlock detection hang threshold in seconds. ENV_OBJECT_DISK_DEGRADED_READ_CAP Environment variable for the bounded degraded disk-read admission lane size. ENV_OBJECT_DISK_PERMIT_WAIT_TIMEOUT Environment variable for the disk read permit wait timeout (seconds). ENV_OBJECT_DISK_READ_TIMEOUT Environment variable for disk read operation timeout in seconds. ENV_OBJECT_DISK_WRITE_ABSOLUTE_CAP Environment variable for the absolute per-object erasure write cap (seconds). ENV_OBJECT_DISK_WRITE_STALL_TIMEOUT Environment variable for the per-shard erasure write stall timeout (seconds). ENV_OBJECT_DUPLEX_BUFFER_SIZE Environment variable for duplex pipe buffer size in bytes. ENV_OBJECT_DYNAMIC_TIMEOUT_ENABLE Environment variable to enable dynamic timeout calculation. ENV_OBJECT_FILE_CACHE_RECLAIM_READ_ENABLE ENV_OBJECT_FILE_CACHE_RECLAIM_THRESHOLD ENV_OBJECT_FILE_CACHE_RECLAIM_WRITE_ENABLE ENV_OBJECT_GET_SKIP_BITROT_VERIFY Skip bitrot hash verification on GetObject reads. ENV_OBJECT_GET_TIMEOUT Environment variable for GetObject request timeout in seconds. ENV_OBJECT_HIGH_CONCURRENCY_THRESHOLD Environment variable name for high concurrency threshold used in adaptive buffering. ENV_OBJECT_IO_BANDWIDTH_EMA_BETA Environment variable for bandwidth EMA beta. ENV_OBJECT_IO_BANDWIDTH_HIGH_THRESHOLD_BPS Environment variable for the high bandwidth threshold in bytes per second. ENV_OBJECT_IO_BANDWIDTH_LOW_THRESHOLD_BPS Environment variable for the low bandwidth threshold in bytes per second. ENV_OBJECT_IO_BUFFER_SIZE Environment variable for I/O buffer size in bytes. ENV_OBJECT_IO_HDD_BUFFER_CAP Environment variable for HDD buffer cap in bytes. ENV_OBJECT_IO_HIGH_PRIORITY_SIZE_THRESHOLD Environment variable for I/O high priority size threshold in bytes. ENV_OBJECT_IO_LOAD_HIGH_THRESHOLD_MS Environment variable for high load wait time threshold in milliseconds. ENV_OBJECT_IO_LOAD_LOW_THRESHOLD_MS Environment variable for low load wait time threshold in milliseconds. ENV_OBJECT_IO_LOAD_SAMPLE_WINDOW Environment variable for load sampling window size. ENV_OBJECT_IO_LOW_PRIORITY_SIZE_THRESHOLD Environment variable for I/O low priority size threshold in bytes. ENV_OBJECT_IO_NVME_BUFFER_CAP Environment variable for NVMe buffer cap in bytes. ENV_OBJECT_IO_PATTERN_HISTORY_SIZE Environment variable for access-pattern history size. ENV_OBJECT_IO_QUEUE_HIGH_CAPACITY Environment variable for high priority queue capacity. ENV_OBJECT_IO_QUEUE_LOW_CAPACITY Environment variable for low priority queue capacity. ENV_OBJECT_IO_QUEUE_NORMAL_CAPACITY Environment variable for normal priority queue capacity. ENV_OBJECT_IO_RANDOM_READAHEAD_DISABLE_CONCURRENCY Environment variable for disabling read-ahead under random or mixed access with concurrency. ENV_OBJECT_IO_SEQUENTIAL_STEP_TOLERANCE_BYTES Environment variable for sequential access step tolerance in bytes. ENV_OBJECT_IO_SSD_BUFFER_CAP Environment variable for SSD buffer cap in bytes. ENV_OBJECT_IO_STARVATION_PREVENTION_INTERVAL Environment variable for starvation prevention check interval in milliseconds. ENV_OBJECT_IO_STARVATION_THRESHOLD_SECS Environment variable for starvation threshold in seconds. ENV_OBJECT_IO_STORAGE_DETECTION_ENABLE Environment variable for enabling storage media detection for adaptive I/O scheduling. ENV_OBJECT_IO_STORAGE_MEDIA_OVERRIDE Environment variable for overriding detected storage media. ENV_OBJECT_LOCK_ACQUIRE_TIMEOUT Environment variable for lock acquisition timeout in seconds. ENV_OBJECT_LOCK_DIAG_ENABLE Environment variable to enable object namespace lock diagnostics. ENV_OBJECT_LOCK_DIAG_SLOW_ACQUIRE_MS Environment variable for the slow object lock acquisition threshold in milliseconds. ENV_OBJECT_LOCK_DIAG_SLOW_HOLD_MS Environment variable for the long object lock hold threshold in milliseconds. ENV_OBJECT_LOCK_OPTIMIZATION_ENABLE Environment variable to enable/disable lock optimization. ENV_OBJECT_LOCK_RPC_DETACHED_LIMIT Environment variable for how many timed-out lock RPCs per peer may keep
running in the background instead of being cancelled. ENV_OBJECT_LOCK_RPC_EVICTION_COOLDOWN_MS Environment variable for the minimum interval between evictions of the
cached lock RPC channel to one peer, in milliseconds. ENV_OBJECT_LOCK_RPC_REQUEST_LIMIT Environment variable for the maximum number of in-flight lock acquisition
RPCs admitted to one peer. Requests beyond this bound fail fast as
retryable contention so a slow endpoint cannot accumulate an unbounded
queue while its channel remains healthy. ENV_OBJECT_LOCK_RPC_TIMEOUT_MS Environment variable for remote namespace lock RPC transport timeout in milliseconds. ENV_OBJECT_MAX_CONCURRENT_DISK_READS Environment variable name for maximum concurrent disk reads for object operations. ENV_OBJECT_MAX_TIMEOUT Environment variable for maximum GetObject timeout in seconds. ENV_OBJECT_MEDIUM_CONCURRENCY_THRESHOLD Environment variable name for medium concurrency threshold used in adaptive buffering. ENV_OBJECT_MIN_TIMEOUT Environment variable for minimum GetObject timeout in seconds. ENV_OBJECT_MMAP_READ_ENABLE Environment variable for mmap-based read enable. ENV_OBJECT_MMAP_READ_MAX_LENGTH Environment variable capping the byte length a single mmap-copy read may
materialize in memory. ENV_OBJECT_PRIORITY_SCHEDULING_ENABLE Environment variable to enable/disable priority-based I/O scheduling. ENV_OBJECT_SEEK_SUPPORT_THRESHOLD Threshold for small object seek support in bytes. ENV_OBJECT_TRANSACTION_FENCING_FLEET_CONFIRMED Operator-attested confirmation that every serving node understands the
object transaction fencing contract. ENV_OBJECT_TRANSACTION_FENCING_WRITE Request the object-transaction fencing contract used by storage-owned
cleanup receipts and lock-window optimizations. ENV_OBJECT_ZERO_COPY_ENABLE Deprecated compatibility alias for mmap-based read enable. ENV_OUTPUT_DIR Output directory ENV_POOL_META_V2_FLEET_CONFIRMED Operator-attested confirmation that every pool metadata reader and writer understands version 2. ENV_POOL_META_V2_WRITE Request writing pool metadata version 2. ENV_POOL_META_V3_FLEET_CONFIRMED Operator-attested confirmation that every pool metadata reader and writer
understands the version 3 generation and recovery protocol. ENV_POOL_META_V3_WRITE Request writing pool metadata version 3 with durable generations. ENV_PREFIX ENV_PUT_COMMIT_NAMESPACE_LOCK_ACQUIRE_TIMEOUT_MS Environment variable for the experimental PUT commit namespace lock acquire timeout in milliseconds. ENV_PUT_FOREGROUND_ADMISSION_ENABLE Enable foreground PutObject request admission. ENV_PUT_FOREGROUND_ADMISSION_LIMIT Maximum foreground PutObject requests admitted concurrently per process. ENV_PUT_FOREGROUND_ADMISSION_WAIT_TIMEOUT_MS Time in milliseconds a foreground PutObject waits for an admission permit. ENV_PUT_LARGE_FOREGROUND_ADMISSION_ENABLE Enable automatic foreground admission for large or unknown-size PutObject requests. ENV_PUT_LARGE_FOREGROUND_ADMISSION_LIMIT Explicit maximum foreground write requests admitted concurrently per process. ENV_PUT_LARGE_FOREGROUND_ADMISSION_MIN_SIZE_BYTES Minimum direct PutObject size that enters automatic foreground write admission. ENV_PUT_LARGE_FOREGROUND_ADMISSION_WAIT_TIMEOUT_MS Time in milliseconds an automatic foreground direct PutObject waits for a permit. ENV_PUT_MULTIPART_FOREGROUND_ADMISSION_MAX_PENDING Maximum multipart UploadPart or UploadPartCopy requests waiting for a foreground write permit per process. ENV_PUT_MULTIPART_FOREGROUND_ADMISSION_MIN_SIZE_BYTES Minimum UploadPart size that enters automatic foreground write admission. ENV_PUT_MULTIPART_FOREGROUND_ADMISSION_WAIT_TIMEOUT_MS Time in milliseconds a multipart UploadPart waits for a foreground write permit. ENV_RNG_SEED ENV_RUNTIME_DIAL9_ENABLED ENV_RUNTIME_DIAL9_FILE_PREFIX ENV_RUNTIME_DIAL9_MAX_FILE_SIZE ENV_RUNTIME_DIAL9_OUTPUT_DIR ENV_RUNTIME_DIAL9_ROTATION_COUNT ENV_RUNTIME_DIAL9_S3_BUCKET Accepted but not honoured: dial9’s S3 uploader depends on a vulnerable
rustls-webpki. Setting this logs a warning. See rustfs/backlog#1157. ENV_RUNTIME_DIAL9_S3_PREFIX Accepted but not honoured; see ENV_RUNTIME_DIAL9_S3_BUCKET ENV_RUSTFS_ACCESS_KEY Environment variable for server access key. ENV_RUSTFS_ACCESS_KEY_FILE Environment variable for server access key file. ENV_RUSTFS_ADDRESS Environment variable for rustfs address
This is the environment variable for rustfs address.
It is used to bind the server to a specific address.
Example: RUSTFS_ADDRESS=“:9000” ENV_RUSTFS_BROWSER_REDIRECT_URL Public browser entrypoint used to build OIDC callback and console redirects. ENV_RUSTFS_BUFFER_DEFAULT_SIZE Environment variable for default buffer size (used when file size is unknown)
Default: 256KB (262144 bytes) ENV_RUSTFS_BUFFER_MAX_SIZE Environment variable for maximum buffer size
Default: 1MB (1048576 bytes) ENV_RUSTFS_BUFFER_MIN_SIZE Environment variable for minimum buffer size
Default: 64KB (65536 bytes) ENV_RUSTFS_BUFFER_PROFILE Environment variable for selecting the buffer profile used for adaptive buffer sizing. ENV_RUSTFS_CONSOLE_ADDRESS Environment variable for console server address. ENV_RUSTFS_CONSOLE_ENABLE Environment variable for console server enable. ENV_RUSTFS_CONSOLE_PREFIX URL path prefix for the embedded console, read once at server startup. ENV_RUSTFS_EXTRA_CA_CERT Environment variable for an extra outbound root CA certificate bundle.
Use this to trust an internal CA for outbound HTTPS clients without replacing
the default operating-system/web PKI roots via SSL_CERT_FILE. ENV_RUSTFS_INTERNODE_DATA_TRANSPORT Environment variable for selecting the internode data-plane transport backend. ENV_RUSTFS_KMS_BACKEND Environment variable for server KMS backend. ENV_RUSTFS_KMS_ENABLE Environment variable for server KMS enable. ENV_RUSTFS_KMS_ENFORCE_SSE_KEY_POLICY Environment variable enabling per-key KMS authorization on the SSE-KMS data path. ENV_RUSTFS_KMS_VAULT_MOUNT_PATH Environment variable for Vault Transit mount path. ENV_RUSTFS_LICENSE Environment variable for server license. ENV_RUSTFS_LICENSE_PUBLIC_KEY Environment variable for the RSA public key used to verify server licenses. ENV_RUSTFS_OBS_ENDPOINT Environment variable for server OBS endpoint. ENV_RUSTFS_REGION Environment variable for server region. ENV_RUSTFS_SECRET_KEY Environment variable for server secret key. ENV_RUSTFS_SECRET_KEY_FILE Environment variable for server secret key file. ENV_RUSTFS_TLS_PATH Environment variable for server tls path. ENV_RUSTFS_UNSUPPORTED_FS_POLICY Environment variable controlling startup behavior when unsupported filesystem types are detected. ENV_RUSTFS_VOLUMES Environment variable for server volumes. ENV_SCANNER_ALERT_EXCESS_FOLDERS Environment variable that controls how many subfolders trigger scanner alerts. ENV_SCANNER_ALERT_EXCESS_VERSIONS Environment variable that controls how many object versions trigger scanner alerts. ENV_SCANNER_ALERT_EXCESS_VERSION_SIZE Environment variable that controls how many cumulative bytes across object versions trigger scanner alerts. ENV_SCANNER_BITROT_CYCLE_SECS Environment variable that specifies the periodic bitrot scan cycle in seconds.
When set to 0, true, on, or yes, every scanner cycle runs in deep mode.
When set to false, off, no, or disabled, periodic deep scans are disabled. ENV_SCANNER_CACHE_SAVE_TIMEOUT_SECS Environment variable that controls scanner cache save timeout in seconds.
The scanner enforces a minimum value of 1. ENV_SCANNER_CYCLE Environment variable that specifies the scanner cycle interval in seconds.
If set, this overrides the cycle interval derived from RUSTFS_SCANNER_SPEED. ENV_SCANNER_CYCLE_MAX_DIRECTORIES Environment variable that caps directories entered by one scanner cycle.
A value of 0 disables the per-cycle directory budget. ENV_SCANNER_CYCLE_MAX_DURATION_SECS Environment variable that caps one scanner cycle’s runtime in seconds.
A value of 0 disables the cycle runtime budget. ENV_SCANNER_CYCLE_MAX_OBJECTS Environment variable that caps objects processed by one scanner cycle.
A value of 0 disables the per-cycle object budget. ENV_SCANNER_DELAY Environment variable that overrides the scanner sleep multiplier. ENV_SCANNER_IDLE_MODE Environment variable that controls whether the scanner sleeps between operations.
When true (default), the scanner throttles itself. When false, it runs at full speed. ENV_SCANNER_MAX_CONCURRENT_DISK_SCANS Environment variable that caps concurrent scanner disk bucket walks per set.
A value of 0 keeps the existing disk-count-based concurrency. ENV_SCANNER_MAX_CONCURRENT_SET_SCANS Environment variable that caps concurrent scanner set tasks.
A value of 0 keeps the existing topology-based concurrency. ENV_SCANNER_MAX_WAIT_SECS Environment variable that overrides the maximum scanner sleep in seconds. ENV_SCANNER_SPEED Environment variable that selects the scanner speed preset.
Valid values: fastest, fast, default, slow, slowest.
Controls the sleep factor, maximum sleep duration, and cycle interval. ENV_SCANNER_START_DELAY_SECS Canonical environment variable name that specifies the scanner start delay in seconds.
If set, this overrides the cycle interval derived from RUSTFS_SCANNER_SPEED. ENV_SCANNER_YIELD_EVERY_N_OBJECTS Environment variable that controls how often scanner object loops yield to the async runtime.
A value of 0 disables this extra object-count yield. ENV_SERVER_MTLS_ENABLE RUSTFS_SERVER_MTLS_ENABLE
Environment variable to enable server mTLS
When set to “1”, RustFS server will require client certificates for authentication.
By default, this is disabled.
To enable, set the environment variable RUSTFS_SERVER_MTLS_ENABLE=1 ENV_SFTP_ADDRESS ENV_SFTP_BACKEND_OP_TIMEOUT_SECS Optional environment variable. If RUSTFS_SFTP_BACKEND_OP_TIMEOUT_SECS
is not set in the process environment, the server uses the default
of 60 seconds and emits no warning. If set, the value must be in
the inclusive range 5 to 600 seconds. Out-of-range values fall
back to the default with a warn-level log naming the requested
value and the bounds. ENV_SFTP_BANNER ENV_SFTP_ENABLE SFTP environment variable names. ENV_SFTP_HANDLES_PER_SESSION Optional environment variable. If RUSTFS_SFTP_HANDLES_PER_SESSION
is not set in the process environment, the server uses the default
of 64 handles per session and emits no warning. If set, the value
must be in the inclusive range 8 to 1024. Out-of-range values fall
back to the default of 64 with a warn-level log naming the
requested value and the bounds. ENV_SFTP_HOST_KEY_DIR ENV_SFTP_HOST_KEY_RELOAD_ENABLE ENV_SFTP_HOST_KEY_RELOAD_INTERVAL ENV_SFTP_IDLE_TIMEOUT ENV_SFTP_PART_SIZE S3 multipart part size in bytes. Default DEFAULT_SFTP_PART_SIZE (16 MiB).
Valid range 5 MiB to 5 GiB (S3 protocol bounds), enforced at startup. ENV_SFTP_READ_CACHE_TOTAL_MEM_BYTES Optional environment variable. If
RUSTFS_SFTP_READ_CACHE_TOTAL_MEM_BYTES is not set in the process
environment, the server uses a 256 MiB default and emits no
warning. If set, the value must be at least 16 MiB. Below-min
values fall back to the default with a warn-level log naming the
requested value and the bound. ENV_SFTP_READ_CACHE_WINDOW_BYTES Optional environment variable. If RUSTFS_SFTP_READ_CACHE_WINDOW_BYTES
is not set in the process environment, the server uses a 4 MiB
default and emits no warning. If set, the value must be in the
inclusive range MAX_READ_LEN (256 KiB) to 64 MiB. Out-of-range
values fall back to the default with a warn-level log naming the
requested value and the bounds. ENV_SFTP_READ_ONLY ENV_SHARD_INTEGRITY_FLEET_CONFIRMED Operator confirmation that every reader, writer and background coordinator
understands independent shard commitments. This is not capability discovery
or a fence against an old binary rejoining the fleet. ENV_SHARD_INTEGRITY_WRITE Create independent shard commitments for new writes after the fleet is upgraded.
Existing protected objects and multipart uploads retain their protection. ENV_SNOWBALL_MAX_ENTRY_BYTES Maximum unpacked size accepted for one Snowball archive member. ENV_SNOWBALL_MAX_UNPACKED_BYTES Maximum cumulative unpacked object bytes accepted from one Snowball
archive request. ENV_STARTUP_READINESS_MAX_WAIT_SECS Maximum time to wait for local node runtime readiness (storage / IAM / lock
quorum) during startup before failing fast (seconds). ENV_STARTUP_TOPOLOGY_RETRY_MAX_DELAY Environment variable capping the per-attempt backoff delay while retrying
startup topology/DNS convergence. Accepts durations such as 8s. ENV_STARTUP_TOPOLOGY_WAIT_MODE Environment variable selecting how startup waits for DNS/topology
convergence in multi-node setups. One of auto (default), orchestrated,
bounded, or fail-fast. ENV_STARTUP_TOPOLOGY_WAIT_TIMEOUT Environment variable bounding how long startup waits for topology/DNS
convergence before failing in bounded mode. Accepts durations such as
3m, 90s, 500ms, or a bare number of seconds. ENV_TARGET_STORE_COMPRESS Environment variable controlling whether target queue files are Snappy-compressed.
Applies to both notify and audit target queue stores. ENV_TEST_FORCE_IMMEDIATE_TRANSITION_ENQUEUE_TIMEOUT Test-only fault injection env var that forces the immediate transition enqueue timeout path. ENV_TEST_IAM_FAIL_INIT_ATTEMPTS Test-only fault injection env var that forces a number of IAM bootstrap failures. ENV_TEST_IAM_RETRY_INTERVAL_MS Test-only env var that overrides the deferred IAM retry interval in debug builds. ENV_THREAD_KEEP_ALIVE ENV_THREAD_NAME ENV_THREAD_PRINT_ENABLED ENV_THREAD_STACK_SIZE ENV_TIER_REMOTE_CONNECT_TIMEOUT_SECS Environment variable for remote tier TCP connect timeout in seconds. ENV_TIER_REMOTE_REQUEST_TIMEOUT_SECS Environment variable for the remote tier request timeout in seconds. ENV_TIER_REMOTE_RESPONSE_BODY_IDLE_TIMEOUT_SECS Environment variable for remote tier response-body idle timeout in seconds. ENV_TIER_REMOTE_VERSION_STATE_FLEET_CONFIRMED Operator-attested fleet-wide confirmation for
ENV_TIER_REMOTE_VERSION_STATE_WRITE ENV_TIER_REMOTE_VERSION_STATE_WRITE Request writing the complete remote-tier version state into object metadata. ENV_TLS_KEYLOG TLS related environment variable names and default values
Environment variable to enable TLS key logging
When set to “1”, RustFS will log TLS keys to the specified file for debugging purposes.
By default, this is disabled.
To enable, set the environment variable RUSTFS_TLS_KEYLOG=1 ENV_TLS_RELOAD_ENABLE Environment variable to enable TLS certificate hot reload
Default: false
To enable, set the environment variable RUSTFS_TLS_RELOAD_ENABLE=1 ENV_TLS_RELOAD_INTERVAL Environment variable for TLS certificate reload interval (seconds)
Default: 30 seconds. Minimum: 5 seconds. ENV_TRANSITION_QUEUE_CAPACITY Runtime env var controlling the transition queue capacity. ENV_TRANSITION_QUEUE_SEND_TIMEOUT_MS Runtime env var controlling the transition queue send timeout in milliseconds. ENV_TRANSITION_WORKERS Runtime env var controlling the transition worker count. ENV_TRANSITION_WORKERS_ABSOLUTE_MAX Runtime env var controlling the absolute maximum transition workers. ENV_TRUSTED_PROXIES_LOG_LEVEL Environment variable for the application log level. ENV_TRUSTED_PROXY_CACHE_CAPACITY Environment variable for the proxy validation cache capacity. ENV_TRUSTED_PROXY_CACHE_CLEANUP_INTERVAL Environment variable for the cache cleanup interval in seconds. ENV_TRUSTED_PROXY_CACHE_TTL_SECONDS Environment variable for the cache entry time-to-live (TTL) in seconds. ENV_TRUSTED_PROXY_CHAIN_CONTINUITY_CHECK Environment variable to enable proxy chain continuity checks. ENV_TRUSTED_PROXY_CLOUDFLARE_IPS_ENABLED Environment variable to enable Cloudflare IP range integration. ENV_TRUSTED_PROXY_CLOUD_METADATA_ENABLED Environment variable to enable automatic cloud metadata discovery. ENV_TRUSTED_PROXY_CLOUD_METADATA_TIMEOUT Environment variable for the cloud metadata request timeout in seconds. ENV_TRUSTED_PROXY_CLOUD_PROVIDER_FORCE Environment variable to force a specific cloud provider (overrides auto-detection). ENV_TRUSTED_PROXY_ENABLED Environment variable to enable the trusted proxy middleware. ENV_TRUSTED_PROXY_ENABLE_RFC7239 Environment variable to enable RFC 7239 “Forwarded” header support. ENV_TRUSTED_PROXY_EXTRA_PROXIES Environment variable for additional trusted proxy networks (production specific). ENV_TRUSTED_PROXY_IMPLEMENTATION Environment variable to select the trusted proxy implementation. ENV_TRUSTED_PROXY_IPS Environment variable for individual trusted proxy IPs. ENV_TRUSTED_PROXY_LOG_FAILED_VALIDATIONS Environment variable to enable logging of failed proxy validations. ENV_TRUSTED_PROXY_MAX_HOPS Environment variable for the maximum allowed proxy hops. ENV_TRUSTED_PROXY_METRICS_ENABLED Environment variable to enable Prometheus metrics. ENV_TRUSTED_PROXY_PRIVATE_NETWORKS Environment variable for private network ranges used in internal validation. ENV_TRUSTED_PROXY_PROXIES Environment variable for the list of trusted proxy networks (comma-separated IP/CIDR). ENV_TRUSTED_PROXY_STRUCTURED_LOGGING Environment variable to enable structured JSON logging. ENV_TRUSTED_PROXY_TRACING_ENABLED Environment variable to enable distributed tracing. ENV_TRUSTED_PROXY_VALIDATION_MODE Environment variable for the proxy validation mode. ENV_TRUST_LEAF_CERT_AS_CA Environment variable to trust leaf certificates as CA
When set to “1”, RustFS will treat leaf certificates as CA certificates for trust validation.
By default, this is disabled.
To enable, set the environment variable RUSTFS_TRUST_LEAF_CERT_AS_CA=1 ENV_TRUST_SYSTEM_CA Environment variable to trust system CA certificates
When set to “1”, RustFS will trust system CA certificates in addition to any
custom CA certificates provided in the configuration.
By default, this is disabled.
To enable, set the environment variable RUSTFS_TRUST_SYSTEM_CA=1 ENV_UNSAFE_BYPASS_DISK_CHECK Environment variable to explicitly bypass local physical disk independence checks. ENV_UPDATE_CHECK Toggle update check
It controls whether to check for newer versions of rustfs
Default value: true
Environment variable: RUSTFS_CHECK_UPDATE
Example: RUSTFS_CHECK_UPDATE=false ENV_WEBDAV_ADDRESS ENV_WEBDAV_CA_FILE ENV_WEBDAV_CERTS_DIR ENV_WEBDAV_ENABLE WebDAV environment variable names ENV_WEBDAV_MAX_BODY_SIZE ENV_WEBDAV_MAX_CONNECTIONS ENV_WEBDAV_REQUEST_TIMEOUT ENV_WEBDAV_TLS_ENABLED ENV_WORD_DELIMITER ENV_WORD_DELIMITER_DASH Medium-drawn lines separator
This is used to separate words in environment variable names. ENV_WORKER_THREADS EVENT_DEFAULT_DIR HEALTH_OBJECT_PROGRESS_LOCK_MARGIN_MS Additional time beyond the configured object-lock acquisition deadline. HEAL_BITROT_CYCLE Heal config key setting the scanner-driven periodic deep bitrot scan cycle in seconds. HEAL_KEYS Heal config keys supported by the admin config subsystem. HEAL_SUB_SYS Heal admin config subsystem name. INTERNODE_DATA_TRANSPORT_TCP Legacy alias for “tcp-http”. Both values select the TCP/HTTP transport backend. KAFKA_ACKS KAFKA_BROKERS KAFKA_QUEUE_DIR KAFKA_QUEUE_LIMIT KAFKA_SASL_ENABLE KAFKA_SASL_MECHANISM KAFKA_SASL_PASSWORD KAFKA_SASL_USERNAME KAFKA_TLS_CA KAFKA_TLS_CLIENT_CERT KAFKA_TLS_CLIENT_KEY KAFKA_TLS_ENABLE KAFKA_TOPIC KI_B Constant representing 1 Kibibyte (1024 bytes)
Default value: 1024 KNOWN_INTERNODE_DATA_TRANSPORT_BACKENDS Known internode transport backend names accepted by the config parser. MAX_ADMIN_PEER_PROBE_TIMEOUT_SECS MAX_ADMIN_REQUEST_BODY_SIZE Maximum size for standard admin API request bodies (1 MB)
Used for: user creation/update, policies, tier config, KMS config, events, groups, service accounts
Rationale: Admin API payloads are typically JSON/XML configs under 100KB.
AWS IAM policy limit is 6KB-10KB. 1MB provides generous headroom. MAX_BUCKET_METADATA_IMPORT_SIZE Maximum size for bucket metadata import operations (100 MB)
Used for: Bucket metadata import containing configurations for many buckets
Rationale: Large deployments may have thousands of buckets with various configs.
100MB allows importing metadata for ~10,000 buckets with reasonable configs. MAX_HEAL_REQUEST_SIZE Maximum size for healing operation requests (1 MB)
Used for: Healing parameters and configuration
Rationale: Healing requests contain bucket/object paths and options. Should be small. MAX_IAM_IMPORT_EXPANDED_SIZE Maximum total size the members of an IAM import ZIP may expand to (100 MB).
Used for: bounding decompression of ImportIam archive members.
Rationale: MAX_IAM_IMPORT_SIZE caps the compressed upload only. Deflate
reaches ratios far above 100:1, so without a separate budget a 10 MB archive
can expand without bound. 100 MB keeps a 10x headroom over the compressed cap
— ample for legitimate IAM exports, which are small JSON documents — while
keeping the worst case bounded. MAX_IAM_IMPORT_SIZE Maximum size for IAM import/export operations (10 MB)
Used for: IAM entity imports/exports containing multiple users, policies, groups
Rationale: ZIP archives with hundreds of IAM entities. 10MB allows ~10,000 small configs. MAX_OIDC_RESPONSE_SIZE Maximum size for OIDC provider response bodies (1 MB)
Used for: discovery documents, JWKS documents and token endpoint responses
Rationale: a hostile or compromised identity provider must not be able to exhaust
memory through an arbitrarily large or endless response body. MAX_S3_CLIENT_RESPONSE_SIZE Maximum size for S3 client response bodies (10 MB)
Used for: Reading responses from remote S3-compatible services (ACL, attributes, lists)
Rationale: Responses from external services should be bounded.
Large responses (>10MB) indicate misconfiguration or potential attack.
Typical responses: ACL XML < 10KB, List responses < 1MB MAX_SINGLE_PUT_OBJECT_SIZE Maximum body size accepted by a single PutObject or UploadPart request (5 GiB).
Used for: the s3s streaming-body limit and the request-header admission check.
Rationale: matches the AWS S3 single-PUT / single-part ceiling. Larger objects
must use multipart upload. The header check rejects an oversize
Content-Length before any body byte is read so the client gets
EntityTooLarge immediately instead of streaming 5 GiB into a mid-stream failure. MAX_SNOWBALL_ENTRY_BYTES MAX_SNOWBALL_UNPACKED_BYTES METER_INTERVAL Default configuration meter interval
Default value: 30 MI_B Constant representing 1 Mebibyte (1024 * 1024 bytes)
Default value: 1048576 MQTT_BROKER MQTT_KEEP_ALIVE_INTERVAL MQTT_PASSWORD MQTT_QOS MQTT_QUEUE_DIR MQTT_QUEUE_LIMIT MQTT_RECONNECT_INTERVAL MQTT_TLS_CA MQTT_TLS_CLIENT_CERT MQTT_TLS_CLIENT_KEY MQTT_TLS_POLICY MQTT_TLS_TRUST_LEAF_AS_CA MQTT_TOPIC MQTT_USERNAME MQTT_WS_PATH_ALLOWLIST MYSQL_DSN_STRING MYSQL_FORMAT MYSQL_MAX_OPEN_CONNECTIONS MYSQL_QUEUE_DIR MYSQL_QUEUE_LIMIT MYSQL_TABLE MYSQL_TLS_CA MYSQL_TLS_CLIENT_CERT MYSQL_TLS_CLIENT_KEY NATS_ADDRESS NATS_CREDENTIALS_FILE NATS_JETSTREAM_ACK_TIMEOUT_DEFAULT_SECS NATS_JETSTREAM_ACK_TIMEOUT_MAX_SECS NATS_JETSTREAM_ACK_TIMEOUT_MIN_SECS NATS_JETSTREAM_ACK_TIMEOUT_SECS NATS_JETSTREAM_ENABLE NATS_JETSTREAM_STREAM_NAME NATS_PASSWORD NATS_QUEUE_DIR NATS_QUEUE_LIMIT NATS_SUBJECT NATS_TLS_CA NATS_TLS_CLIENT_CERT NATS_TLS_CLIENT_KEY NATS_TLS_REQUIRED NATS_TOKEN NATS_USERNAME POSTGRES_DSN_STRING POSTGRES_FORMAT POSTGRES_QUEUE_DIR POSTGRES_QUEUE_LIMIT POSTGRES_TABLE POSTGRES_TLS_CA POSTGRES_TLS_CLIENT_CERT POSTGRES_TLS_CLIENT_KEY POSTGRES_TLS_REQUIRED PULSAR_AUTH_TOKEN PULSAR_BROKER PULSAR_PASSWORD PULSAR_QUEUE_DIR PULSAR_QUEUE_LIMIT PULSAR_TLS_ALLOW_INSECURE PULSAR_TLS_CA PULSAR_TLS_HOSTNAME_VERIFICATION PULSAR_TOPIC PULSAR_USERNAME QUOTA_API_PATH QUOTA_CONFIG_FILE QUOTA_EXCEEDED_ERROR_CODE QUOTA_INTERNAL_ERROR_CODE QUOTA_INVALID_CONFIG_ERROR_CODE QUOTA_INVALID_TYPE_ERROR_MSG QUOTA_METADATA_SYSTEM_ERROR_MSG QUOTA_NOT_FOUND_ERROR_CODE QUOTA_TYPE_HARD REDIS_CHANNEL REDIS_CONNECTION_TIMEOUT REDIS_KEEP_ALIVE_INTERVAL REDIS_MAX_RETRY_ATTEMPTS REDIS_MAX_RETRY_DELAY REDIS_MIN_RETRY_DELAY REDIS_PASSWORD REDIS_PIPELINE_BUFFER_SIZE REDIS_QUEUE_DIR REDIS_QUEUE_LIMIT REDIS_RECONNECT_RETRY_ATTEMPTS REDIS_RESPONSE_TIMEOUT REDIS_TLS_ALLOW_INSECURE REDIS_TLS_CA REDIS_TLS_CLIENT_CERT REDIS_TLS_CLIENT_KEY REDIS_TLS_POLICY REDIS_URL REDIS_USERNAME RUSTFS_CA_CERT Default CA certificate filename for rustfs
This is the default CA certificate filename for rustfs.
It is used to store the CA certificate of the application.
Default value: ca.crt RUSTFS_CLIENT_CA_CERT_FILENAME Default filename for client CA certificate
client_ca.crt (CA bundle for verifying client certificates in server mTLS) RUSTFS_CLIENT_CERT_FILENAME Default filename for client certificate
client_cert.pem RUSTFS_CLIENT_KEY_FILENAME Default filename for client private key
client_key.pem RUSTFS_DOCS_URL Default documentation URL for rustfs
This is the default documentation URL for rustfs.
It is used to provide the documentation of the application.
Default value: https://docs.rustfs.com RUSTFS_GITHUB_URL Default GitHub URL for rustfs
This is the default GitHub URL for rustfs.
It is used to provide the source code of the application.
Default value: https://github.com/rustfs/rustfs RUSTFS_HTTPS_PREFIX Default HTTPS prefix for rustfs
This is the default HTTPS prefix for rustfs.
It is used to identify HTTPS URLs.
Default value: https:// RUSTFS_HTTP_PREFIX Default HTTP prefix for rustfs
This is the default HTTP prefix for rustfs.
It is used to identify HTTP URLs.
Default value: http:// RUSTFS_LICENSE Default license for rustfs
This is the default license for rustfs.
It is used to provide the license of the application.
Default value: Apache-2.0 RUSTFS_LICENSE_URL Default license URL for rustfs
This is the default license URL for rustfs.
It is used to provide the license URL of the application.
Default value: https://www.apache.org/licenses/LICENSE-2.0 RUSTFS_PUBLIC_CERT Default public certificate filename for rustfs
This is the default public certificate filename for rustfs.
It is used to store the public certificate of the application.
Default value: public.crt RUSTFS_REGION Default region for rustfs
This is the default region for rustfs.
It is used to identify the region of the application.
Default value: us-east-1 RUSTFS_TLS_CERT Default TLS cert for rustfs
This is the default cert for TLS. RUSTFS_TLS_KEY Default TLS key for rustfs
This is the default key for TLS. RUSTFS_UNSUPPORTED_FS_POLICY_FAIL RUSTFS_UNSUPPORTED_FS_POLICY_WARN RUSTFS_WEBHOOK_SKIP_TLS_VERIFY_DEFAULT SAMPLE_RATIO Default configuration sample ratio
Default value: 1.0 SCANNER_ALERT_EXCESS_FOLDERS Scanner config key controlling direct subfolder count alerts. SCANNER_ALERT_EXCESS_VERSIONS Scanner config key controlling object version count alerts. SCANNER_ALERT_EXCESS_VERSION_SIZE Scanner config key controlling retained version size alerts. SCANNER_BITROT_CYCLE Scanner config key setting the periodic bitrot scan cycle in seconds. SCANNER_CACHE_SAVE_TIMEOUT Scanner config key controlling scanner cache save timeout in seconds. SCANNER_CYCLE Scanner config key overriding the cycle interval in seconds. SCANNER_CYCLE_MAX_DIRECTORIES Scanner config key capping directories entered by one cycle. SCANNER_CYCLE_MAX_DURATION Scanner config key capping one cycle’s runtime in seconds. SCANNER_CYCLE_MAX_OBJECTS Scanner config key capping objects processed by one cycle. SCANNER_DELAY Scanner config key overriding the scanner sleep multiplier. SCANNER_IDLE_MODE Scanner config key controlling whether scanner throttling is enabled. SCANNER_KEYS Scanner config keys supported by the admin config subsystem. SCANNER_MAX_CONCURRENT_DISK_SCANS Scanner config key capping concurrent scanner disk bucket walks per set. SCANNER_MAX_CONCURRENT_SET_SCANS Scanner config key capping concurrent scanner set tasks. SCANNER_MAX_WAIT Scanner config key overriding the maximum scanner sleep in seconds. SCANNER_SPEED Scanner config key selecting the speed preset. SCANNER_START_DELAY Scanner config key setting the startup delay in seconds. SCANNER_SUB_SYS Scanner admin config subsystem name. SCANNER_YIELD_EVERY_N_OBJECTS Scanner config key controlling how often object loops yield. SERVICE_VERSION Default configuration service version
Default value: 1.0.0
Environment variable: RUSTFS_OBS_SERVICE_VERSION
Uses the same value as VERSION constant USE_STDOUT Default configuration use stdout
Default value: false VERSION Application version
Default value: 1.0.0
Environment variable: RUSTFS_VERSION WEBHOOK_AUTH_TOKEN WEBHOOK_BATCH_SIZE WEBHOOK_CLIENT_CA WEBHOOK_CLIENT_CERT WEBHOOK_CLIENT_KEY WEBHOOK_ENDPOINT WEBHOOK_HTTP_TIMEOUT WEBHOOK_MAX_RETRY WEBHOOK_QUEUE_DIR WEBHOOK_QUEUE_LIMIT WEBHOOK_RETRY_INTERVAL WEBHOOK_SKIP_TLS_VERIFY