Ukukhishwa kweseva ye-SFTPGo 2.5.0 kushicilelwe, okukuvumela ukuthi uhlele ukufinyelela ukude kumafayela usebenzisa izivumelwano ze-SFTP, SCP/SSH, Rsync, HTTP kanye neWebDav, kanye nokunikeza ukufinyelela kumakhosombe we-Git usebenzisa iphrothokholi ye-SSH. Idatha inganikezwa kokubili ohlelweni lwefayela lendawo nasekugcinweni kwangaphandle okuhambisana ne-Amazon S3, i-Google Cloud Storage kanye ne-Azure Blob Storage. Kungenzeka ukugcina idatha ngendlela ebethelwe. Ukugcina imininingo egciniwe yomsebenzisi kanye nemethadatha, ama-DBMS asekelwa i-SQL noma ifomethi yokhiye/inani asetshenziswa, njenge-PostgreSQL, MySQL, SQLite, CockroachDB noma i-bbolt, kodwa futhi kunethuba lokugcinwa imethadatha ku-RAM, engadingi uxhumano lwedatha yangaphandle. Ikhodi yephrojekthi ibhalwe ku-Go futhi isatshalaliswa ngaphansi kwelayisensi ye-GPLv3.
Enguqulweni entsha:
- Isixhumi esibonakalayo sewebhu sinikeza amandla okuvala imilayezo yamaphutha. Kusixhumi esibonakalayo sewebhu somlawuli, ukwesekwa kungeziwe ukuze kuseshwe kulogi yokuhlola kanye nokuthekelisa idatha esuka kuyo, ukuphathwa kohlu lwamakheli e-IP namanethiwekhi kuqalisiwe, kanye nekhono lokumisa i-SMTP namapharamitha avamile we-ACME kanye ne-SFTP kuhlinzekiwe. I-web-interface yeklayenti isebenzise ifomu layo lokungena ngemvume (esikhundleni se-auth eyisisekelo), yengeza imisebenzi yokukopisha futhi yasusa umkhawulo kusayizi wokulanda.
- Ukwesekwa okwengeziwe kwezinqubomgomo zephasiwedi, isibonelo, ungachaza izimfuneko zamandla ephasiwedi futhi usethe impilo yonke yephasiwedi.
- Kwengezwe ikhono lokubonisa izaziso mayelana namagama ayimfihlo aphelelwe yisikhathi ku-EventManager, yenze umsebenzi wokukopisha, yengeza usekelo lwezenzo ezibizwe ngaphambilini (pre-*) nezibambi ezicushwa izenzo ezithile (ngokwesibonelo, kwengezwe isibambi esibizwa lapho umsebenzisi engena).
- Kwengezwe amandla okunikeza amalungelo omlawuli kubasebenzisi.
- Kwengezwe imiyalo kusixhumi esibonakalayo somugqa womyalo ukuze usethe kabusha iphasiwedi yomlawuli futhi uhlole impilo yesevisi.
- Usekelo olungeziwe lwezitatimende ezinemibandela lapho kwenziwa ukuqamba kabusha okuningi kwamafayela ohlangothini lwabahlinzeki bamafu.
- Ukwesekwa okwengeziwe kokulandelela nokulayisha kabusha okuzenzakalelayo kwezitifiketi ze-TLS.
- Ikhono elingeziwe lokuchaza izinhlobo zangokwezifiso ze-MIME ze-WebDAV.
- I-SSH inikwe amandla ngokuzenzakalela ukuze kugunyazwe ikhibhodi esebenzayo.
- Kumodi ephathekayo, kube nokwenzeka ukulayisha amaphasiwedi efayelini.
- Kwengezwe usekelo lokuhlola lwesevisi ye-Terraform.
Izici eziyinhloko ze-SFTPGo:
- I-akhawunti ngayinye ihlutshiwe, ikhawulela ukufinyelela kuhla lwemibhalo lwasekhaya lomsebenzisi. Kungenzeka ukudala uhla lwemibhalo olubonakalayo olubhekisela kudatha engaphandle kohlu lwasekhaya lomsebenzisi.
- Ama-akhawunti agcinwa kusizindalwazi somsebenzisi esingaphambanisi nesizindalwazi somsebenzisi wesistimu. I-SQLite, i-MySQL, i-PostgreSQL, i-bbolt ne-in-memory storage ingasetshenziswa ukugcina imininingo egciniwe yabasebenzisi. Izindlela zinikeziwe zokumepha ama-akhawunti abonakalayo nawesistimu - ukwenza imephu okuqondile noma okunganasizathu kuyenzeka (umsebenzisi wesistimu oyedwa angenziwa imephu komunye umsebenzisi obonakalayo).
- Ukhiye osesidlangalaleni, ukhiye we-SSH, kanye nokuqinisekiswa kwephasiwedi kuyasekelwa (okuhlanganisa ukuqinisekiswa okusebenzisanayo nokufakwa kwephasiwedi yekhibhodi). Kungenzeka ukubopha okhiye abambalwa kumsebenzisi ngamunye, kanye nokusetha ukuqinisekiswa kwe-multi-factor kanye nezigaba eziningi (isibonelo, uma ukuqinisekiswa kokhiye kuphumelele, iphasiwedi ingase ifakwe ngaphezu kwalokho).
- Kungenzeka ukulungisa izindlela zokuqinisekisa ezihlukene zomsebenzisi ngamunye, kanye nokuchaza izindlela zabo ezisetshenziswa ngokubiza izinhlelo zangaphandle zokufakazela ubuqiniso (isibonelo, zokuqinisekisa nge-LDAP) noma ukuthumela izicelo nge-HTTP API.
- Kungenzeka ukuxhuma izibambi zangaphandle noma amakholi e-HTTP API ukuze uguqule ngokuguqukayo izilungiselelo zomsebenzisi ezibizwa ngaphambi kokuthi umsebenzisi angene. Ukudalwa okunamandla kwabasebenzisi ekuxhumekeni kuyasekelwa.
- Ukusekelwa kwama-quota angawodwana ngosayizi wedatha nenani lamafayela.
- Ukusekelwa kokukhawulwa komkhawulokudonsa ngezilungiselelo ezihlukene zemikhawulo yethrafikhi engenayo nephumayo, kanye nemikhawulo yenani lokuxhumana ngasikhathi sinye.
- Amathuluzi okulawula ukufinyelela asebenza ngokuhlobene nomsebenzisi noma uhla lwemibhalo (ungakhawulela ukubuka uhlu lwamafayela, ukwenqabela ukulayisha, ukulanda, ukubhala ngaphezulu, ukususa, ukuqamba kabusha noma ukushintsha amalungelo okufinyelela, ukuvimbela ukudalwa kwezinkomba noma izixhumanisi ezingokomfanekiso, njll.).
- Kumsebenzisi ngamunye, ungachaza imikhawulo yenethiwekhi ngayinye, isibonelo, ungavumela kuphela ukufinyelela kuma-IP athile noma ama-subnet.
- Isekela ukuxhumeka kwezihlungi zokuqukethwe okulandekayo ngokuphathelene nabasebenzisi ngabanye kanye nezinkomba (isibonelo, ungavimbela ukulandwa kwamafayela ngesandiso esithile).
- Ungabopha izibambi ezethulwa ngesikhathi sokusebenza okuhlukahlukene ngefayela (ukulayisha, ukususa, ukuqamba kabusha, njll.). Ngokungeziwe ekushayeleni izibambi, ukuthumela izaziso ngendlela yezicelo ze-HTTP kuyasekelwa.
- Ukunqanyulwa okuzenzakalelayo koxhumano olungasebenzi.
- Isibuyekezo sokucushwa kwe-athomu ngaphandle kokunqamula ukuxhumana.
- Ihlinzeka ngamamethrikhi okuqapha e-Prometheus.
- Iphrothokholi ye-HAProxy PROXY isekelwa ukuhlela ukulinganisa kokulayisha noma ukuxhumeka kommeleli kumasevisi e-SFTP/SCP ngaphandle kokulahlekelwa ulwazi lwekheli le-IP eliwumthombo womsebenzisi.
- I-REST API yokuphatha abasebenzisi nezinkomba, ukudala izipele nokubika ngoxhumo olusebenzayo.
- Isixhumi esibonakalayo sewebhu (http://127.0.0.1:8080/web) ukuze sicushwe futhi siqashwe (ukulungiselela ngamafayela okumisa avamile nakho kuyasekelwa).
- Ikhono lokuchaza izilungiselelo ngefomethi ye-JSON, TOML, YAML, HCL kanye ne-envfile.
- Ukusekelwa kokuxhuma nge-SSH ngokufinyelela okulinganiselwe kumiyalo yesistimu. Isibonelo, imiyalo edingekayo ku-Git (git-receive-pack, git-upload-pack, git-upload-archive) kanye ne-rsync ivunyelwe ukusebenza, kanye nemiyalo embalwa eyakhelwe ngaphakathi (scp, md5sum, sha*sum, cd, pwd, sftpgo-copy and sftpgo-remove).
- Imodi ephathekayo yokwabelana ngohla lwemibhalo olulodwa olwabiwe nokukhiqiza okuzenzakalelayo kokuqinisekisa kokuxhumana okukhangiswa nge-multicast DNS.
- Isistimu yokuphrofayili eyakhelwe ngaphakathi yokuhlaziya ukusebenza.
- Inqubo yokuthutha yesistimu ye-Linux eyenziwe lula.
- Igcina amalogi ngefomethi ye-JSON.
- Ukusekelwa kwezinkomba ezibonakalayo (isibonelo, okuqukethwe kohlu oluthile lwemibhalo kunganikezwa hhayi ohlelweni lwefayela lendawo, kodwa kusitoreji samafu sangaphandle).
- Ukusekelwa kwama-cryptfs ukuze kubethele ngokusobala idatha kumpukane lapho ulondoloza kusistimu yefayela futhi uguqule ukubethela lapho ulayisha.
- Usekelo lokudlulisela phambili ukuxhumana kwamanye amaseva e-SFTP.
- Ikhono lokusebenzisa i-SFTPGo njengesistimu engaphansi ye-SFTP ye-OpenSSH.
- Amandla okugcina imininingwane nedatha eyimfihlo ngendlela ebethelwe kusetshenziswa amaseva e-KMS (Amasevisi Okulawula Okubalulekile), njenge-Vault, GCP KMS, AWS KMS.
- Ukusekela ukuqinisekiswa kwezinto ezimbili kusetshenziswa amaphasiwedi esikhathi esisodwa nempilo ekhawulelwe (TOTP, RFC 6238). Izinhlelo zokusebenza ezifana ne-Authy ne-Google Authenticator zingasetshenziswa njengeziqinisekisi.
- Ukunwetshwa kokusebenza ngama-plugin. Isibonelo, ama-plugin ayatholakala ngokusekelwa kwezinsizakalo zokushintshanisa ngokhiye ezengeziwe, Shicilela/Bhalisa ukuhlanganiswa kwesikimu, ukugcinwa kanye nokubuyiswa kolwazi mayelana nemicimbi ku-DBMS.
Source: opennet.ru