9

If you use ActiveStorage and you have a page with N images you get N additional requests to your Rails app (i.e. N redirects). That means wasting a lot of server resources if you have tens of images on a page.

I know that the redirect is useful for signed URLs. However I wonder why Rails does not precompute the final signed URL and embed that into the HTML page... In this way we could keep the advantages of signed URLs / protected files, without making N additional calls to the Rails server.

Is it possible to include the final URL / pre-signed URL of image variants directly in the HTML (thus avoiding the redirect)? Otherwise, why is that impossible?

collimarco
  • 34,231
  • 36
  • 108
  • 142
  • 1
    If your resources are publically available in general, then you can use the `public: true` config flag. https://edgeguides.rubyonrails.org/active_storage_overview.html#public-access – ekampp Nov 25 '19 at 08:39
  • @ekampp Are you sure that `public: true` will avoid the redirect? I think that the redirect though`ActiveStorage::RepresentationsController` is still there, also for public, because it is required to check for the variant existence... Have you tried that? Or do you have any additional reference? – collimarco Nov 25 '19 at 21:47
  • Nope. Answer below will, though. – ekampp Nov 26 '19 at 06:02

2 Answers2

27

After days of reasoning and tests, I am really excited of my final solution, which I explain below. This is an opinionated approach to images and may not represent the current Rails Way™️, however it has incredible advantages for websites that serve many public images, in particular:

  1. When you serve a page with N images you don't get 1 + N requests to your app server, instead you get only 1 request for the page
  2. The images are served through a CDN and this improves the loading time
  3. The bucket is not completely public, instead it is protected by Cloudflare
  4. The images are cached by Cloudflare, which greatly reduce your S3 bill
  5. You greatly reduce the number of API requests (i.e. exists) to S3
  6. This solution does not require large changes to Rails, and thus it is straightforward to switch back to Rails default behavior in case of problems

Here's the solution:

  1. Create an s3 bucket and configure it to host a public website (i.e. call it storage.example.com) - you can even disable the public access at bucket level and allow access only to the Cloudflare ips using a bucket policy
  2. Go to Cloudflare and configure a CNAME for storage.example.com that points to your domain; you need to use Flexible SSL (you can use a page rule for the subdomain); use page rules to set heavy caching: set Cache Everything and set a very long value (e.g. 1 year) for Browser Cache TTL and Edge Cache TTL
  3. In you Rails application you can keep using private storage / acl, which is the default Rails behavior
  4. In your Rails application call @post.variant(...).processed after every update or creation of @post; then in your views use 'https://storage.example.com/' + @post.variant(...).key' (note that we don't call processed here in the views to avoid additional checks in s3); you can also have a rake task that calls processed on each object, in case you need to regenerate the variants; this is works perfectly if you have only a few variants (e.g. 1 image / variant per post) that are changed infrequently

Most of the above steps are optional, so you can combine them based on your needs.

collimarco
  • 34,231
  • 36
  • 108
  • 142
  • Do you mean CloudFront in stead of Cloudflare? – Troy Apr 24 '20 at 04:56
  • 1
    @Troy I mean Cloudflare: imho it is much more powerful and cheaper compared to CloudFront – collimarco Apr 24 '20 at 10:51
  • Sorry - I was so deep in the google for CloudFront, I got confused. – Troy Apr 25 '20 at 05:34
  • Thank you! This was very thorough and helpful. – vivipoit Apr 30 '20 at 09:46
  • Thanks for your answer! To use the new source imagem url, I need create a method on ApplicationHelper `.asset_cdn_path` to access key from attached image. But i had a question: How you made to render images locally (localhost)? After made this change i can't render anyone... – Rafael Gomes Francisco Jun 28 '20 at 03:43
  • 1
    @collimarco Thanks for this. What do you think of this alternative solution though, could it be even better? Thanks! https://dev.to/lipanski/serving-activestorage-uploads-through-a-cdn-with-rails-direct-routes-3nc2 – Eduardo Álvarez Aug 05 '20 at 14:49
  • Nice work! I would suggest to signed your url to avoid public content and allow access for a specific duration (few minutes). – brcebn Apr 08 '21 at 15:45
4

You can use the service_url to create direct links to your resources.

We don't use Rails views in our project so my knowledge about the view layer is rusty. I think you could put it in a dedicated helper and then use it from your views.

ekampp
  • 1,904
  • 18
  • 31