Workspace Enterprise / BYOS - Control Plane

Deploy-to-Replit Orchestrator

Configure storage policy modes, BYOS routing rules, and tenant isolation for an Enterprise CortexFS deployment. This control-plane demo shows how each policy mode routes data and where keys live.

Architecture Flow

Replit Workspace
writes / reads
CortexFS Agent
chunk hash route
Policy Engine
select mode below
Storage Backend

Storage Policy Mode

platform_optimized Workspace Core / Pro

Shared dedup pool across all tenants. Platform manages keys. Highest storage efficiency.

  • Cross-tenant dedup enabled
  • Platform-managed key derivation
  • BYOS: optional pass-through
tenant_optimized Workspace Enterprise

Isolated dedup namespace per tenant. Tenant key prefix isolates all hashes.

  • Within-tenant dedup only
  • Tenant-scoped key derivation
  • BYOS: tenant bucket routing
private_secure Workspace Private / BYOS

Per-object unique encryption. No cross-tenant or within-tenant dedup. Full key control.

  • Dedup disabled full isolation
  • Customer-managed keys (CMK)
  • BYOS: mandatory own bucket

BYOS Routing Rules

Data Routing Rules

Workload Pattern Entropy Threshold Assigned Mode Destination

Deploy Configuration