Exoscale SOS vs OpenStack Barbican
Exoscale SOS
exoscale.comOpenStack Barbican
docs.openstack.orgSide by side
| Figure | Exoscale SOS | OpenStack Barbican |
|---|---|---|
| Price from | — | Free |
| Free plan | — | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | — |
| Linux | — | Yes |
| API | Yes | Yes |
| Self-hosted | — | Yes |
| Plans published | 2 | 1 |
| Spec score · Cloud Computing platform | 7.4 (#7) | 7.4 (#9) |
| Spec score · Cloud Infrastructure as a Service (Cloud IaaS) Software | 7.3 (#11) | 7.3 (#12) |
| Integrations | Exoscale lists backup recipes and integrations including Cyberduck, Duplicati, Restic, Veeam, AWS CLI, and Terraform for Object Storage workflows. | Documented secret-store plugins include KMIP, Dogtag, and Vault, alongside PKCS#11 crypto plugins. |
| Purpose | Simple Object Storage stores unstructured data such as backups, media, logs, and documents as objects. | Barbican is the OpenStack Key Manager service for secure storage, provisioning, and management of secrets such as keys, certificates, passwords, and raw binary data. |
Plans
Exoscale SOS
- Archival StoragePrice not published
- Standard Object StoragePrice not published
In their own words
Exoscale SOS
Exoscale SOS has no write-up on Specifiction yet; its figures are above.
OpenStack Barbican
OpenStack Barbican is the OpenStack Key Manager service for storing, provisioning, and managing secrets such as keys, certificates, passwords, and raw binary data. Its barbican-api component provides an OpenStack-native REST API for managing secrets; barbican-worker and barbican-keystone-listener are also part of the service. The listener manages Barbican’s database records for Keystone projects when those projects are deleted. A plugin architecture lets operators connect software secret stores or hardware such as HSMs. Documented options include KMIP, Dogtag, and Vault secret-store plugins, as well as PKCS#11 crypto plugins. With PKCS#11, master encryption and HMAC keys can reside in an HSM. Operators can develop plugins for storage, generation, and event handling, though support status may be stable, experimental, or out-of-tree. The default Simple Crypto plugin stores its single encryption key in plaintext in barbican.conf, so service-node access must be restricted carefully. Container ACL settings do not carry over to associated secrets, and ACL functionality requires Keystone integration. Barbican is free under Apache 2.0; installation guidance assumes a working OpenStack deployment.