- For [SSE-S3 or SSE-KMS encryption via KMS](https://docs.min.io/community/minio-object-store/operations/server-side-encryption.html "MinIO KMS Guide"), all sites **must**  have access to a central KMS deployment. This can be achieved via a central KES server or multiple KES servers (say one per site) connected via a central KMS (Vault) server.

## Configuring Site Replication

    }

    static Stream<Arguments> portSpecs() {
        return Stream.of(
                // spec, expectedPort
                Arguments.of("smb://server/share", SmbConstants.DEFAULT_PORT), Arguments.of("smb://server:445/share", 445),
                Arguments.of("smb://server:139/share", 139));
    }

    @ParameterizedTest(name = "parseURL: {0} -> port {1}")
    @MethodSource("portSpecs")

        assertEquals(2, bytesRead);
        assertEquals(11, response.dialectIndex);
    }

    @Test
    void testReadBytesWireFormat_NoExtendedSecurity() throws UnsupportedEncodingException {
        // Setup server data for this scenario
        serverData.capabilities = 0; // No extended security
        serverData.encryptionKeyLength = 8;
        response.byteCount = 15; // 8 bytes key + 6 bytes "DOMAIN" + 1 null terminator

     * query. This might be the address of a specific host, a name server,
     * or a broadcast address.
     *
     * @param host
     *            the name to resolve
     * @param type
     *            the hex code of the name
     * @param scope
     *            the scope of the name
     * @param svr
     *            server to query
     * @return the resolved address

    assertThat(okHttpClient.protocols[0]).isEqualTo(Protocol.H2_PRIOR_KNOWLEDGE)
  }

  @Test fun nullDefaultProxySelector() {
    server!!.enqueue(MockResponse(body = "abc"))
    ProxySelector.setDefault(null)
    val client = clientTestRule.newClient()
    val request = Request(server!!.url("/"))
    val response = client.newCall(request).execute()
    assertThat(response.body.string()).isEqualTo("abc")
  }

    }

    @Test
    void constructor_shouldInitializeFieldsCorrectly() {
        // Given
        String server = "testServer";
        int access = 0x00000001; // Example access value

        // When
        MsrpcLsarOpenPolicy2 msrpcLsarOpenPolicy2 = new MsrpcLsarOpenPolicy2(server, access, mockPolicyHandle);

        // Then
        // Verify that the super constructor is called with correct arguments

    }

    /**
     * Checks if the given address is one of the configured WINS servers.
     *
     * @param svr the server address to check
     * @return whether the given address is a WINS server
     */
    protected boolean isWINS(final InetAddress svr) {
        for (int i = 0; svr != null && i < this.transportContext.getConfig().getWinsServers().length; i++) {

Die Hierarchie ist wie folgt:

* **Uvicorn**: ein ASGI-Server
    * **Starlette**: (verwendet Uvicorn) ein Web-Mikroframework
        * **FastAPI**: (verwendet Starlette) ein API-Mikroframework mit mehreren zusätzlichen Funktionen zum Erstellen von APIs, mit Datenvalidierung, usw.

* **Uvicorn**:
    * Bietet die beste Leistung, da außer dem Server selbst nicht viel zusätzlicher Code vorhanden ist.

echo "done"

# Start MinIO instances
echo -n "Starting MinIO instances ..."
minio server --certs-dir /tmp/certs --address ":9001" --console-address ":10000" /tmp/minio1/{1...4}/disk{1...4} /tmp/minio1/{5...8}/disk{1...4} >/tmp/minio1_1.log 2>&1 &
minio server --certs-dir /tmp/certs --address ":9002" --console-address ":11000" /tmp/minio2/{1...4}/disk{1...4} /tmp/minio2/{5...8}/disk{1...4} >/tmp/minio2_1.log 2>&1 &

install --set tls.enabled=true,tls.certSecret=tls-ssl-minio minio/minio ``` ### Installing certificates from third party CAs MinIO can connect to other servers, including MinIO nodes or other server types such as NATs and Redis. If these servers use certificates that were not registered with a known CA, add trust for these certificates to MinIO Server by bundling these certificates into a Kubernetes secret and providing it to Helm via the `trustedCertsSecret` value. If `.Values.tls.enabled` is `true`...