⚡ Free Public Beta · Drop-in AWS S3 Egress Saver

Slash Your AWS S3
Egress Fees to $0.

A drop-in caching proxy that automatically caches your S3 files in Cloudflare R2 on the first request. Zero code rewrite, instant response, zero egress bills.

⚡ Get Started in 2 Mins 📊 View Benchmarks

❌ Without Soko

💻 Your App

↓

🧣 AWS S3

↓

🌍 Internet Transfer

💸 $0.09 / GB Egress Fee

✅ With Soko

💻 Your App

↓

⚡ Soko Proxy

↓

☁️ Cloudflare R2 Cache

🎉 $0 Egress — Cache HIT

Live Response Preview

See the Cache HIT in real time.

Every subsequent request is served from Cloudflare R2 — no AWS egress, no latency penalty.

Terminal — curl response

$ curl -i https://soko.aeorost.org/my-bucket/dataset.zip

HTTP/1.1 200 OK

X-Cache: HIT

X-Cache-Source: R2

Content-Type: application/octet-stream

Cache-Control: public, max-age=31536000

CF-Cache-Status: HIT

X-Egress-Cost: $0.00

TLS-Version: TLSv1.3

Developer Quickstart

Integration takes 30 seconds.

Keep your existing AWS SDKs. Just change the endpoint URL to soko.aeorost.org

            python
            
          
import boto3

s3_client = boto3.client(
    's3',
    endpoint_url='https://soko.aeorost.org',  # Point to Soko
    region_name='eu-west-3'
)

# Use your normal S3 code — zero changes needed
response = s3_client.get_object(
    Bucket='my-bucket',
    Key='dataset.zip'
)
data = response['Body'].read()
print(f"Downloaded {len(data)} bytes — $0 egress!")

            typescript
            
          
import { S3Client, GetObjectCommand } from "@aws-sdk/client-s3";

const s3Client = new S3Client({
  region: "eu-west-3",
  endpoint: "https://soko.aeorost.org",  // Point to Soko
  forcePathStyle: true,
});

// Fetch your object — zero S3 egress fees
const response = await s3Client.send(
  new GetObjectCommand({
    Bucket: "my-bucket",
    Key: "dataset.zip",
  })
);

console.log("Cache source:", response.$metadata.httpHeaders["x-cache-source"]);
// → "R2"

            bash
            
          
# Fetch directly via HTTPS — show response headers
curl -i https://soko.aeorost.org/my-bucket/dataset.zip

# Download and save the file
curl -o dataset.zip https://soko.aeorost.org/my-bucket/dataset.zip

# Check cache status only (no body download)
curl -I https://soko.aeorost.org/my-bucket/dataset.zip

# With verbose output to inspect TLS handshake
curl -v --tlsv1.3 https://soko.aeorost.org/my-bucket/dataset.zip

Key Features

Built for production. Designed for devs.

Everything you need to eliminate S3 egress costs without touching your existing codebase.

🔌

Drop-in Replacement

Fully compatible with all standard AWS SDKs — boto3, @aws-sdk/client-s3, and the AWS CLI. No code rewrites, no dependency changes. One URL swap is all it takes.

🚀

Non-Blocking Caching

Uses background writes (Cloudflare waitUntil) to cache content in R2 without adding latency to your first request. MISS is fast, HIT is faster.

🔐

AWS SigV4 Aware

Transparently handles AWS Signature Version 4 authentication. Works seamlessly with both private and public S3 buckets without exposing your credentials to end users.

🌍

Edge Latency

Cached responses are served from Cloudflare's 300+ edge nodes worldwide. Your users get sub-20ms responses with zero AWS egress charges — ever.

FAQ

Common questions, answered.

Everything you need to know before you integrate.

Do I need to move my files out of AWS S3? ▼

No! S3 remains your single source of truth. Soko fetches from S3 on the first request (Cache MISS) and serves all subsequent requests from Cloudflare R2 (Cache HIT). Your data never leaves S3 — Soko just creates a transparent, cost-saving read layer in front of it.

Which HTTP operations are supported? ▼

Soko is optimized for read workloads — GET and HEAD requests are fully supported and cached. For write operations (PUT, POST, DELETE), continue using your direct S3 endpoint. Soko is intentionally read-focused to keep the proxy surface area small and secure.

Is it secure? ▼

Yes. All traffic is encrypted in transit via TLS 1.3, and every request passes through Cloudflare's enterprise-grade edge infrastructure — the same network protecting millions of production workloads. AWS SigV4 signatures are forwarded and verified per-request; credentials are never stored by Soko.

What happens on a Cache MISS? ▼

On the very first request, Soko fetches the object from your S3 bucket in real time. The response is immediately streamed back to your client while being asynchronously written to Cloudflare R2 in the background. The second request for the same object will always be a Cache HIT — served from R2 at $0 egress cost.

How is the 100 GB/month limit tracked? ▼

Bandwidth is tracked per project (unique S3 bucket prefix). During the beta, soft limits are enforced with graceful degradation — you will receive an email notification before any throttling occurs. A real-time usage dashboard is on the roadmap for the next major release.

Slash Your AWS S3Egress Fees to $0.