Backup to Ningxia and Beijing AWS S3 Fails

  • Resolved rmmcclay

    (@rmmcclay)


    4 years, 7 months ago

    AWS S3 Backups to Ningxia and Beijing AWS Fail

    First of all, UpdraftPlus is a great plugin. We are trying to get it work with AWS S3 storage in Ningxia. I think the Amazon S3 option does not work at all for China, but the S3-Compatible almost works. We get this error message:

    S3 settings test result: Failure: We successfully accessed the bucket, but the attempt to create a file in it failed. Please check your access credentials. (UpdraftPlus_S3::putObject(): [7] Failed to connect to amazonaws.com.cn port 443: Connection refused)

    However, with identical S3 bucket settings for a bucket on Singapore AWS works fine:

    S3 settings test result: Success: We accessed the bucket, and were able to create files within it. The communication with Amazon S3 was encrypted.

    We’ve run out of things to try.

    Any ideas?

Viewing 8 replies - 1 through 8 (of 8 total)

  • Facing this same issue on my site how to resolve it?

    Plugin Contributor DNutbourne

    (@dnutbourne)

    Hi,

    I’m afraid that, due to the extra restrictions on the AWS Beijing and Ningxia endpoints, UpdraftPlus has not been fully tested with these services.

    I have looked through the S3 method, and it appears that the plugin is not currently compatible with the Ningxia region. However, the Beijing region should work.

    I have made a note for our developers regarding adding support for the Ningxia endpoint.

    Regarding the error you recive for the S3 generic method, this indicates that the connection is being blocked. Please could you or your server admin/hosts check the outgoing firewall for your server?

    Apologies for the inconveninence.

    Thread Starter rmmcclay

    (@rmmcclay)

    Thanks for the reply, DNutbourne. I tried Beijing region with both Amazon S3 and S3-Compatible and neither succeed. I’ll check in 443 port, but it appears to be open.

    Plugin Author David Anderson

    (@davidanderson)

    Do you have the Chinese endpoints enabled on your AWS account? I remember when looking at this a couple of years ago or so that, unlike other endpoints, they’re not enabled by default; you have to find the setting in your AWS account and turn it on. You might want to test connectivity in another tool with your credentials to confirm that those credentials work.

    Thread Starter rmmcclay

    (@rmmcclay)

    Thanks, David, I didn’t have any endpoints, but I created one for a bucket, but no sure about how to configure it (create policies) yet.

    On the AWS Beijing endpoint list there is a message at the bottom of the list:

    The Amazon S3 s3.cn-north-1.amazonaws.com.cn Region supports only Signature Version 4 in request authentications.

    Not sure if that means anything to the Updraft developers.

    The failure message I’m getting now is slightly different from before:

    S3 settings test result: Failure: We successfully accessed the bucket, but the attempt to create a file in it failed. Please check your access credentials. (UpdraftPlus_S3::putObject(): [6] Could not resolve host: s3-control.cn-north-1.amazonaws.com.cn)

    Until I sort this out, backing up to an S3 bucket at AWS Singapore works fine.

    Plugin Author David Anderson

    (@davidanderson)

    > Not sure if that means anything to the Updraft developers.

    That message is of no consequence, as UpdraftPlus uses signature version 4.

    Have you succeeded in accessing these buckets from any other S3-compatible tool?

    Thread Starter rmmcclay

    (@rmmcclay)

    Hi David — Yes, we successfully do daily backups from QNAP devices in Shenzhen and Ningbo to S3 buckets in both AWS Ningxia and Beijing.

    Plugin Author David Anderson

    (@davidanderson)

    Thank you. Looking back up the thread, this…

    > Failed to connect to amazonaws.com.cn port 443: Connection refused

    … means that network connectivity was blocked. And the other:

    > Could not resolve host: s3-control.cn-north-1.amazonaws.com.cn)

    means that the DNS lookup of that host failed. If those errors occur consistently (i.e. aren’t freak events), then you need to speak to the web hosting company. They’re not things UpdraftPlus can control. They suggest something deliberately blocks the DNS lookups and connectivity from the webserer.

Viewing 8 replies - 1 through 8 (of 8 total)
  • The topic ‘Backup to Ningxia and Beijing AWS S3 Fails’ is closed to new replies.