Kuburitswa kweSFTGo 2.5.0 server kwakabudiswa, izvo zvinokutendera kuti uronge kure kure kune mafaera uchishandisa SFTP, SCP / SSH, Rsync, HTTP uye WebDav protocol, pamwe nekupa mukana weGit repositories uchishandisa SSH protocol. . Dhata inogona kupihwa zvese kubva kunharaunda faira system uye kubva kunze kwekuchengetera inoenderana neAmazon S3, Google Cloud Storage uye Azure Blob Storage. Zvinogoneka kuchengetedza data mune encrypted fomu. Kuchengeta dhatabhesi remushandisi uye metadata, maDBMS ane rutsigiro rweSQL kana kiyi / kukosha fomati anoshandiswa, akadai sePostgreSQL, MySQL, SQLite, CockroachDB kana bbolt, asi pane zvakare mukana wekuchengeta metadata muRAM, iyo isingade yekunze database yekubatanidza. Iyo kodhi yeprojekiti yakanyorwa muGo uye yakagoverwa pasi peGPLv3 rezinesi.
Mushanduro itsva:
- Iyo webhu interface inopa kugona kuvhara mameseji ekukanganisa. Muwebhu dhizaini yemutungamiriri, rutsigiro rwakawedzerwa rwekutsvaga mugodhi rekuongorora uye kutumira data kubva kwairi, manejimendi ezvinyorwa zveIP kero nemanetiweki akaitwa, uye kugona kugadzirisa SMTP uye yakajairwa ACME uye SFTP maparamita akaitwa. akapa. Iyo mutengi webhu-interface yakaisa yayo yekupinda fomu (panzvimbo peiyo basic auth), yakawedzera makopi mashandiro uye yakabvisa muganho pahukuru hwekurodha.
- Yakawedzerwa tsigiro yepassword marongero, semuenzaniso, iwe unogona kutsanangura password simba zvinodiwa uye kuseta password hupenyu.
- Yakawedzera kugona kuratidza zviziviso nezve akapera nguva mapassword muChiitikoManager, yakashandisa kopi, yakawedzera tsigiro yeasati adaidzwa zviito (pre-*) uye vanobata izvo zvinokonzereswa nezvimwe zviito (semuenzaniso, akawedzera mubati anodaidzwa kana mushandisi anyora. muri).
- Yakawedzera kugona kupa maneja kodzero kune vashandisi.
- Yakawedzera mirairo kune yekuraira mutsara interface kuti igadzirise zvakare maneja password uye tarisa hutano hwesevhisi.
- Yakawedzera tsigiro yezvimiro kana uchiita kuwanda renaming yemafaira padivi pevanopa makore.
- Yakawedzera tsigiro yekutevera uye otomatiki kurodhazve zvitupa zveTLS.
- Yakawedzerwa kugona kutsanangura tsika MIME mhando dzeWebDAV.
- SSH inogoneswa nekusarudzika kune inopindirana kiibhodhi kusimbiswa.
- Mune inotakurika modhi, zvakave zvichiita kurodha mapassword kubva mufaira.
- Yakawedzera tsigiro yekuyedza yeTerraform sevhisi.
Zvinhu zvikuru zveSFTPGo:
- Imwe neimwe account yakadzikwa, ichiganhurira kupinda kune dhairekitori remusha remushandisi. Izvo zvinogoneka kugadzira chaiwo madhairekitori anoreva kune data kunze kwedhairekitori remusha remushandisi.
- Maakaunti anochengetwa mune chaiyo mushandisi dhatabhesi iyo isingapesane neiyo system mushandisi database. SQLite, MySQL, PostgreSQL, bbolt uye in-memory chengetedzo inogona kushandiswa kuchengetedza mushandisi dhatabhesi. Nzira dzakapihwa kumepu chaiwo uye system maakaundi - yakananga kana yekupokana mepu inogoneka (mumwe mushandisi wesystem anogona kumepu kune mumwe mushandisi chaiwo).
- Kiyi yeruzhinji, SSH kiyi, uye password yechokwadi inotsigirwa (kusanganisira inopindirana yechokwadi nekhibhodi yekupinda password). Zvinokwanisika kusunga makiyi akati wandei kumushandisi wega wega, pamwe nekumisikidza multi-factor uye multi-stage authentication (semuenzaniso, kana ikabudirira kiyi yechokwadi, password inogona kukumbirwa zvakare).
- Zvinokwanisika kugadzirisa nzira dzakasiyana dzechokwadi dzemushandisi wega wega, pamwe nekutsanangura nzira dzadzo dzakaitwa nekudaidza zvirongwa zveuthenticator zvekunze (semuenzaniso, zvekusimbisa kuburikidza neLDAP) kana kutumira zvikumbiro kuburikidza neHTTP API.
- Zvinogoneka kubatanidza vekunze vanobata kana HTTP API mafoni kuti uchinje zvine simba marongero emushandisi anodanwa mushandisi asati apinda. Inotsigira dynamic mushandisi kusikwa pakubatanidza.
- Tsigiro yemakota ega ega saizi yedata uye nhamba yemafaira.
- Tsigiro yekudzikamisa bandwidth neyakasiyana marongero emiganhu yeinouya uye inobuda traffic, pamwe nemiganhu yehuwandu hwekubatanidza panguva imwe chete.
- Kuwana zvigadziriso zvekushandisa zvinoshanda zvine chekuita nemushandisi kana dhairekitori (iwe unogona kurambidza kutarisa rondedzero yemafaira, kurambidza kurodha, kurodha, kunyora pasi, kudzima, kutumidza zita kana kushandura kodzero dzekuwana, kurambidza kusikwa kwemadhairekitori kana zviratidzo zvinongedzo, nezvimwewo).
- Kune wega wega mushandisi, iwe unogona kutsanangura wega kurambidzwa kwenetiweki, semuenzaniso, iwe unogona chete kubvumira kuwana kubva kune dzimwe IPs kana subnets.
- Iyo inotsigira kubatana kwemafirita ekudhawunirodha zvemukati zvine chekuita nevashandisi vega uye madhairekitori (semuenzaniso, unogona kuvharira kurodha kwemafaira neimwe yekuwedzera).
- Iwe unogona kusunga zvibatiso zvinotangwa panguva dzakasiyana siyana mashandiro nefaira (kurodha, kudzima, kutumidza zita, nezvimwewo). Pamusoro pekufonera vanobata, kutumira zviziviso nenzira yeHTTP zvikumbiro zvinotsigirwa.
- Kudzima otomatiki kwezvisingashande zvinongedzo.
- Atomic gadziriso yegadziriso pasina kutyora zvinongedzo.
- Kupa metrics ekutarisa muPrometheus.
- Iyo HAProxy PROXY protocol inotsigirwa kuronga kuyera kuremerwa kana proxy yekubatanidza kune SFTP/SCP masevhisi pasina kurasikirwa neruzivo rwekunobva mushandisi IP kero.
- REST API yekutarisira vashandisi uye madhairekitori, kugadzira backups uye kushuma pane inoshanda yekubatanidza.
- Webhu interface (http://127.0.0.1:8080/web) yekumisikidza uye kutarisa (kumisikidza kuburikidza neyakajairwa configuration mafaira kunotsigirwawo).
- Kugona kutsanangura marongero muJSON, TOML, YAML, HCL uye envfile mafomati.
- Tsigiro yekubatanidza kuburikidza neSSH ine shoma yekuwana kune system mirairo. Semuenzaniso, mirairo inodiwa kuGit (git-receive-pack, git-upload-pack, git-upload-archive) uye rsync inotenderwa kumhanya, pamwe nemirairo yakati wandei yakavakirwa (scp, md5sum, sha*sum, cd, pwd, sftpgo-kopi uye sftpgo-bvisa).
- Inotakurika modhi yekugovera imwe yakagovaniswa dhairekitori ine otomatiki chizvarwa chekubatanidza zvitupa zvinoshambadzirwa kuburikidza nemulticast DNS.
- Yakavakwa-in-profiling system yekuongorora maitiro.
- Yakareruka Linux system account yekufambisa maitiro.
- Kuchengeta matanda muJSON format.
- Tsigiro yemadhairekitori echokwadi (semuenzaniso, zviri mukati meimwe dhairekitori zvinogona kupihwa kwete kubva kune yemuno faira system, asi kubva kunze kwegore kuchengetedza).
- Tsigiro ye cryptfs kunyora pachena data pane nhunzi paunenge uchichengetedza kune iyo faira system uye decrypt paunenge uchiisa.
- Tsigiro yekutumira zvinongedzo kune mamwe maseva eSFTP.
- Kugona kushandisa SFTPGo seSFTP subsystem yeOpenSSH.
- Iko kugona kuchengetedza zvitupa uye yakavanzika data mune yakavanzika fomu uchishandisa KMS maseva (Key Management Services), seVault, GCP KMS, AWS KMS.
- Tsigiro yehuviri-chinhu chechokwadi uchishandisa imwe-nguva mapassword ane mashoma ehupenyu (TOTP, RFC 6238). Zvishandiso zvakaita seAuthy neGoogle Authenticator zvinogona kushandiswa sezvibvumikiso.
- Kuwedzera kwekushanda kuburikidza nemapulagi. Semuenzaniso, ma plug-ins anowanikwa nerutsigiro rwekuwedzera kiyi yekutsinhana masevhisi, Publish/Subscribe chirongwa chekubatanidza, kuchengetedza uye kudzoreredza ruzivo nezve zviitiko muDBMS.
Source: opennet.ru