The winery backend (T3533) can be used as a library from the objstorage and storage servers, which is helpful to reduce latency and increase bandwidth. It however has drawbacks such as:
* Increasing the attack surface
* Requiring the machines running obstorage / storage have elevated access to the postgresql server and the Ceph cluster
* Inability to separate read workers from write workers and control how many of them there are, which may be necessary for throttling
To address these problems, the winery backend could be run on a standalone server exposing an API identical to the objstorage server. A winery proxy backend could be configured to reverse proxy all calls to the obstorage API to this server and provide the required isolation.