Ukukhishwa Kweseva ye-SFTP SFTPGo 1.0

Ukukhishwa kokuqala okubalulekile kweseva kwenzeke I-SFTPGo 1.0, okukuvumela ukuthi uhlele ukufinyelela ukude kumafayela usebenzisa izivumelwano ze-SFTP, SCP/SSH ne-Rsync. Phakathi kwezinye izinto, i-SFTPGo ingasetshenziswa ukunikeza ukufinyelela kumakhosombe e-Git kusetshenziswa iphrothokholi ye-SSH. Idatha ingadluliswa kokubili kusuka ohlelweni lwefayela lendawo kanye nesitoreji sangaphandle esihambisana ne-Amazon S3 ne-Google Cloud Storage. Ukugcina imininingo egciniwe yomsebenzisi kanye nemethadatha, kusetshenziswa ama-DBMS anosekelo lwe-SQL noma ifomethi yokhiye/inani, njenge-PostgreSQL 9.4+, MySQL 5.6+, SQLite 3.x noma i-bbolt 1.3.x. Kukhona nemodi yokugcina imethadatha ku-RAM, engadingi ukuxhuma i-database yangaphandle. Ikhodi yephrojekthi ibhalwe ku-Go and isatshalaliswa ngu ilayisensi ngaphansi kwe-GPLv3.

Izici eziyinhloko:

• I-akhawunti ngayinye ihlutshiwe, ikhawulela ukufinyelela kuhla lwemibhalo lwasekhaya lomsebenzisi. Kungenzeka ukudala uhla lwemibhalo olubonakalayo olubhekisela kudatha engaphandle kohlu lwasekhaya lomsebenzisi.
• Ama-akhawunti agcinwa kusizindalwazi somsebenzisi esingaphambanisi nesizindalwazi somsebenzisi wesistimu. I-SQLite, i-MySQL, i-PostgreSQL, i-bbolt ne-in-memory storage ingasetshenziswa ukugcina imininingo egciniwe yabasebenzisi. Izindlela zinikeziwe zokumepha ama-akhawunti abonakalayo nawesistimu - ukwenza imephu okuqondile noma okunganasizathu kuyenzeka (umsebenzisi wesistimu oyedwa angenziwa imephu komunye umsebenzisi obonakalayo).
• Ukhiye osesidlangalaleni, ukhiye we-SSH, kanye nokuqinisekiswa kwephasiwedi kuyasekelwa (okuhlanganisa ukuqinisekiswa okusebenzisanayo nokufakwa kwephasiwedi yekhibhodi). Kungenzeka ukubopha okhiye abambalwa kumsebenzisi ngamunye, kanye nokusetha ukuqinisekiswa kwe-multi-factor kanye nezigaba eziningi (isibonelo, uma ukuqinisekiswa kokhiye kuphumelele, iphasiwedi ingase ifakwe ngaphezu kwalokho).
• Kungenzeka ukulungisa izindlela zokuqinisekisa ezihlukene zomsebenzisi ngamunye, kanye nokuchaza izindlela zabo ezisetshenziswa ngokubiza izinhlelo zangaphandle zokufakazela ubuqiniso (isibonelo, zokuqinisekisa nge-LDAP) noma ukuthumela izicelo nge-HTTP API.
• Kungenzeka ukuxhuma izibambi zangaphandle noma amakholi e-HTTP API ukuze uguqule ngokushintshashintshayo amapharamitha omsebenzisi, abizwa ngaphambi kokuthi umsebenzisi angene. Isekelwe ashukumisayo ukudala abasebenzisi ekuxhumekeni.
• Ukusekelwa kwama-quota angawodwana ngosayizi wedatha nenani lamafayela.
• Ukusekelwa kokukhawulwa komkhawulokudonsa ngezilungiselelo ezihlukene zemikhawulo yethrafikhi engenayo nephumayo, kanye nemikhawulo yenani lokuxhumana ngasikhathi sinye.
• Amathuluzi okulawula ukufinyelela asebenza ngokuhlobene nomsebenzisi noma uhla lwemibhalo (ungakhawulela ukubuka uhlu lwamafayela, ukwenqabela ukulayisha, ukulanda, ukubhala ngaphezulu, ukususa, ukuqamba kabusha noma ukushintsha amalungelo okufinyelela, ukuvimbela ukudalwa kwezinkomba noma izixhumanisi ezingokomfanekiso, njll.).
• Kumsebenzisi ngamunye, ungachaza imikhawulo yenethiwekhi ngayinye, isibonelo, ungavumela kuphela ukufinyelela kuma-IP athile noma ama-subnet.
• Isekela ukuxhumeka kwezihlungi zokuqukethwe okulandekayo ngokuphathelene nabasebenzisi ngabanye kanye nezinkomba (isibonelo, ungavimbela ukulandwa kwamafayela ngesandiso esithile).
• Ungabopha izibambi ezethulwa ngesikhathi sokusebenza okuhlukahlukene ngefayela (ukulayisha, ukususa, ukuqamba kabusha, njll.). Ngokungeziwe ekushayeleni izibambi, ukuthumela izaziso ngendlela yezicelo ze-HTTP kuyasekelwa.
• Ukunqanyulwa okuzenzakalelayo koxhumano olungasebenzi.
• Isibuyekezo sokucushwa kwe-athomu ngaphandle kokunqamula ukuxhumana.
• Ukuhlinzeka amamethrikhi okuqapha e-Prometheus.
• Iphrothokholi ye-HAProxy PROXY isekelwa ukuhlela ukulinganisa kokulayisha noma ukuxhumeka kommeleli kumasevisi e-SFTP/SCP ngaphandle kokulahlekelwa ulwazi lwekheli le-IP eliwumthombo womsebenzisi.
• I-REST API ukuphatha abasebenzisi nezinkomba, dala izipele futhi ukhiqize imibiko ngoxhumo olusebenzayo.
• Isixhumi esibonakalayo sewebhu (http://127.0.0.1:8080/web) ukuze kucushwe futhi kuqashwe (ukulungiselela ngamafayela okusetha avamile nakho kuyasekelwa).
• Ikhono lokuchaza izilungiselelo ngefomethi ye-JSON, TOML, YAML, HCL kanye ne-envfile.
• ukweseka ukuxhumana nge-SSH ngokufinyelela okulinganiselwe kumiyalo yesistimu. Isibonelo, ivunyelwe ukusebenzisa imiyalo edingekayo ku-Git (git-receive-pack, git-upload-pack, git-upload-archive) kanye ne-rsync, kanye nemiyalo embalwa eyakhelwe ngaphakathi (scp, md5sum, sha*sum. , cd, pwd, sftpgo-copy kanye ne-sftpgo-remove).
• Imodi eziphathwayo ukwabelana ngohla lwemibhalo olulodwa olujwayelekile nokukhiqiza okuzenzakalelayo kokuqinisekisa kokuxhuma okukhangiswa nge-multicast DNS.
• Isistimu eshumekiwe ukwenza iphrofayili ukuhlaziya ukusebenza.
• Esenziwe lula inqubo ukufuduka kwama-akhawunti esistimu ye-Linux.
• Isitoreji amalogi ngefomethi ye-JSON.

Source: opennet.ru