+ one bucket-data pool for public client access from internet (name zone1.rgw.buckets.data-pub) 

+ one bucket-data pool for private client access from local network (name zone1.rgw.buckets.data-pub)

each pool bucket-data has one individual access key: access key public (access pool public) and  access key private (access pool private).

Can you give me a recomment for this or bestpractice that you've done? what needs to be done?

Or give me your best solution for securiy a cluster ceph object with  public client access and  private client access?

Thank you very much

Br,

----------------------------------------------