Ukukhutshwa kweseva ye-SFTPGo 2.5.0 ipapashiwe, ekuvumela ukuba uququzelele ukufikelela okude kwiifayile usebenzisa i-SFTP, SCP/SSH, Rsync, HTTP kunye neeprothokholi zeWebDav, kunye nokubonelela ngokufikelela kwi-Git yokugcina usebenzisa iSSH protocol. . Idatha inokudluliselwa zombini kwinkqubo yefayile yendawo kunye neendawo zokugcina zangaphandle ezihambelana ne-Amazon S3, i-Google Cloud Storage kunye ne-Azure Blob Storage. Kuyenzeka ukugcina idatha kwifom efihliweyo. Ukugcina idatabase yomsebenzisi kunye nemetadata, iiDBMS ngenkxaso yeSQL okanye isitshixo/ifomathi yexabiso isetyenziswa, njengePostgreSQL, MySQL, SQLite, CockroachDB okanye bbolt, kodwa kuyenzeka ukugcina imetadata kwiRAM, engadingi kudibanisa idatabase yangaphandle. Ikhowudi yeprojekthi ibhalwe kwi-Go kwaye isasazwe phantsi kwelayisensi ye-GPLv3.
Kwinguqulelo entsha:
- I-web interface ngoku inika amandla okuvala imiyalezo yeempazamo. I-web interface yomlawuli ngoku ixhasa ukukhangela ii-audit log kunye nokuthumela idatha ngaphandle, kwaye ulawulo loluhlu ngoku luyafumaneka. Iidilesi ze-IP kunye neenethiwekhi, ukukwazi ukumisela i-SMTP kunye neeparameters ze-ACME kunye ne-SFTP ezisemgangathweni ngoku ziyafumaneka. I-client web interface ngoku inefomu yokungena eyenzelwe wena (ithatha indawo ye-basic auth), imisebenzi yokukopa yongeziwe, kwaye umda wobungakanani bokulayisha ususiwe.
- Inkxaso eyongeziweyo yemigaqo-nkqubo yegama lokugqitha
- I-EventManager yongeze ukukwazi ukubonisa izaziso malunga namagama agqithisiweyo aphelelwe lixesha, iphunyezwe umsebenzi wokukopisha, inkxaso eyongeziweyo yezenzo ezibizwe kwangaphambili (pre-*) kunye nabaphangi abavuselelwe kwiintshukumo ezithile (umzekelo, umgcini obizwa xa umsebenzisi eloga ngaphakathi. yongezwe).
- Kongezwe ukukwazi ukunika abasebenzisi amalungelo omlawuli.
- Imiyalelo yongezwe kujongano lomgca womyalelo ukuseta kwakhona igama eligqithisiweyo lomlawuli kwaye ujonge ukusebenza kwenkonzo.
- Inkxaso eyongeziweyo yeengxelo ezinemiqathango xa kusenziwa ukutshintshwa ngokutsha kweefayile ezininzi kwicala lababoneleli belifu.
- Inkxaso eyongezelelweyo yokulandelela kunye nokuqalisa kwakhona ngokuzenzekelayo Izatifikethi ze-TLS.
- Yongeza ukukwazi ukuchaza ezakho iintlobo ze-MIME zeWebDAV.
- I-SSH inoqinisekiso lwebhodi yezitshixo esebenzayo eyenziwe ngokungagqibekanga.
- Kwimo ephathwayo, kuye kwenzeka ukulayisha amagama agqithisiweyo kwifayile.
- Inkxaso yovavanyo eyongeziweyo yenkonzo yeTerraform.
Iimpawu eziphambili zeSFTPGo:
- Iakhawunti nganye ichetyiwe, inciphisa ufikelelo kulawulo lwasekhaya lomsebenzisi. Kuyenzeka ukuba wenze abalawuli benyani abareferensi idatha ngaphandle kolawulo lwasekhaya lomsebenzisi.
- Iiakhawunti zigcinwa kwisiseko sedatha somsebenzisi esingadibaniyo nesiseko sedatha somsebenzisi wenkqubo. I-SQLite, i-MySQL, i-PostgreSQL, i-bbolt kunye ne-in-memory yokugcina ingasetyenziselwa ukugcina i-database yomsebenzisi. Izibonelelo zibonelelwa ukwenza imephu yenyani kunye neeakhawunti zenkqubo - nokuba kuyenzeka ngokuthe ngqo okanye ukucwangciswa ngendlela engacwangciswanga inokwenzeka (umsebenzisi wenkqubo omnye unokubekwa komnye umsebenzisi wenyani).
- Ukuqinisekiswa kusetyenziswa izitshixo zikawonke-wonke, izitshixo ze-SSH kunye namagama ayimfihlo axhaswayo (kuquka ukuqinisekiswa okusebenzayo kunye negama lokugqitha elifakwe kwibhodi yezitshixo). Kuyenzeka ukuba ubophe izitshixo ezininzi kumsebenzisi ngamnye, kunye nokuseta izinto ezininzi kunye nokuqinisekiswa kwamanyathelo amaninzi (umzekelo, kwimeko yokuqinisekiswa kweqhosha eliyimpumelelo, i-password ingacelwa ukongezwa).
- Kumsebenzisi ngamnye, kunokwenzeka ukuba uqwalasele iindlela ezahlukeneyo zokuqinisekisa, kunye nokuchaza iindlela zakho, eziphunyezwe ngokubiza iinkqubo zangaphandle zokuqinisekisa (umzekelo, ukuqinisekiswa nge-LDAP) okanye ukuthumela izicelo nge-HTTP API.
- Kuyenzeka ukudibanisa abaphathi bangaphandle okanye iifowuni ze-HTTP API zokutshintsha ngokuguquguqukayo iiparamitha zomsebenzisi, ezibizwa ngaphambi kokuba umsebenzisi angene. Ukudalwa okuguquguqukayo kwabasebenzisi phezu koqhagamshelwano kuyaxhaswa.
- Ixhasa umlinganiselo ngamnye wobungakanani bedatha kunye nenani leefayile.
- Inkxaso yokunciphisa umda we-bandwidth kunye noqwalaselo olwahlukileyo lwezithintelo zezithuthi ezingenayo neziphumayo, kunye nezithintelo kwinani loqhagamshelwano lwangaxeshanye.
- Izixhobo zokulawula ukufikelela ezisebenza ngokumalunga nomsebenzisi okanye ulawulo (unganciphisa ukujonga uluhlu lweefayile, ukunqanda ukulayishwa, ukukhuphela, ukubhala ngaphezulu, ukucima, ukuqamba ngokutsha okanye ukutshintsha amalungelo okufikelela, ukunqanda ukudalwa kwabalawuli okanye amakhonkco omfuziselo, njl. njl.).
- Kumsebenzisi ngamnye, unokuchaza izithintelo zothungelwano lomntu ngamnye, umzekelo, unokuvumela ukungena kwii-IPs ezithile okanye ii-subnets.
- Ixhasa izihluzi ezidibanisayo zomxholo okhutshelweyo ngokunxulumene nabasebenzisi ngabanye kunye nabalawuli (umzekelo, unokuthintela ukukhuphela iifayile kunye nolwandiso oluthile).
- Kuyenzeka ukuba ubophe abaphathi abaqaliswe ngexesha lemisebenzi eyahlukeneyo ngefayile (ukhuphelo, ucime, uthiye ngokutsha, njl. njl.). Ukongeza kubaphathi beefowuni, ukuthumela izaziso ngendlela yezicelo ze-HTTP kuyaxhaswa.
- Ukupheliswa ngokuzenzekelayo koqhagamshelwano olungasebenziyo.
- Uhlaziyo loqwalaselo lweAtomic ngaphandle kokwaphula imidibaniso.
- Ukubonelela ngeemetriki zokubeka iliso kwi-Prometheus.
- Iprotocol ye-HAProxy PROXY ixhaswa ukuququzelela ukulinganisa umthwalo okanye uxhulumaniso lommeleli kwiinkonzo ze-SFTP/SCP ngaphandle kokulahlekelwa ulwazi malunga nedilesi ye-IP yomthombo womsebenzisi.
- I-REST API yokulawula abasebenzisi kunye nezalathisi, ukudala ii-backups kunye nokuvelisa iingxelo kuqhagamshelwano olusebenzayo.
- Ujongano lwewebhu (http://127.0.0.1:8080/web) ukulungiselela uqwalaselo nokubekwa esweni (uqwalaselo kusetyenziswa iifayile zoqwalaselo oluqhelekileyo nalo luyaxhaswa).
- Ukukwazi ukuchaza izicwangciso kwi-JSON, TOML, YAML, HCL kunye neefomathi ze-envfile.
- Inkxaso yokudibanisa nge-SSH ngokufikelela okulinganiselweyo kwimiyalelo yesixokelelwano. Umzekelo, ivumelekile ukuba iqhube imiyalelo eyimfuneko kwiGit (git-receive-pack, git-upload-pack, git-upload-archive) kunye nersync, kunye nemiyalelo eyakhiweyo emininzi (scp, md5sum, sha*sum). , cd, pwd, sftpgo-kopi kunye ne-sftpgo-susa).
- Imowudi ephathekayo yokwabelana ngolawulo olunye oluqhelekileyo kunye nokuveliswa okuzenzekelayo koqhagamshelwano lweenkcukacha ezithengiweyo nge-multicast DNS.
- Inkqubo eyakhelwe-ngaphakathi yeprofayili yohlalutyo lokusebenza.
- Inkqubo elula yokufudusa iiakhawunti zenkqubo Linux.
- Ukugcina iilog kwifomati ye-JSON.
- Inkxaso yolawulo lwenyani (umzekelo, imixholo yolawulo oluthile inokubonelelwa hayi kwiFS yendawo, kodwa isuka kwindawo yokugcina ilifu yangaphandle).
- Inkxaso ye-Cryptfs yoguqulelo oluselubala lwe-en-the-fly lwedatha xa ugcina kwi-FS kunye nokuguqulelwa kwikhowudi xa ubuya.
- Inkxaso yokuthumela imidibaniso kwezinye iiseva zeSFTP.
- Ukukwazi ukusebenzisa i-SFTPGo njengenkqubo ephantsi ye-SFTP ye-OpenSSH.
- Ukukwazi ukugcina iziqinisekiso kunye nedatha eyimfihlo kwifom efihliweyo usebenzisa iiseva ze-KMS (iiNkonzo zoLawulo oluPhambili), njengeVault, i-GCP KMS, i-AWS KMS.
- Inkxaso yokuqinisekiswa kwezinto ezimbini usebenzisa i-passwords yexesha elilinganiselweyo (TOTP, RFC 6238). Ii-aplikeshini ezifana ne-Authy kunye ne-Google Authenticator zingasetyenziswa njengeziqinisekiso.
- Ukwandisa ukusebenza ngeeplagi. Ngokomzekelo, iiplagi ziyafumaneka ezixhasa iinkonzo ezongezelelweyo zokutshintshiselana okungundoqo, ukuhlanganiswa kweskimu soShicilelo / Bhalisa, ukugcinwa kunye nokubuyiswa kolwazi malunga neziganeko kwi-DBMS.
umthombo: opennet.ru
