Go Back   FlashFXP Forums > >

General Discussion Need help? Have a problem? Let us help you. Bug reports and feature requests should be made using the Bug Tracker or Feature Tracker

Closed Thread
 
Thread Tools Rate Thread Display Modes
Old 06-27-2008, 04:35 PM   #1
dwoods99
Junior Member
 
Join Date: Jun 2008
Posts: 3
Question OpenSSH and FXP setting

I already have an OpenSSH server configured and running well.
I have also implemented a chroot jail. No problems there.

My problem is that someone is asking me to allow server-to-server
transfers with the FXP 'protocol' used by FTP clients such as FlashFXP on Windows.
Their reasoning is that SFTP is not transferring as fast as using the FXP option.

I will only allow changes to be made as long as SSL/TLS is still used.
Is there something in the OpenSSH settings that will allow FXP to be enabled?
I can't find anything so it seems that I may need to install Pure-FTPD and restrict user IP addresses.

I did see that you are working on SFTP in the Beta version, will this help my cause?
I also saw instructions in FAQ for Pro-ftpd and wu-ftpd, but I'd rather keep OpenSSH for FTP purposes, if at all possible.

Any suggestions appreciated.
dwoods99 is offline  
Old 06-27-2008, 09:09 PM   #2
MxxCon
Super Duper
FlashFXP Beta Tester
 
Join Date: Oct 2001
Location: Brooklyn, NY
Posts: 3,881
Default

fxp transfers are impossible with ssh/sftp protocol.
fxp transfers is a feature of only ftp protocol.

ssl/tls is not the same thing as ssh.
__________________
[Sig removed by Administrator: Signature can not exceed 20GB]
MxxCon is offline  
Old 06-28-2008, 01:50 PM   #3
dwoods99
Junior Member
 
Join Date: Jun 2008
Posts: 3
Default

As for file size, we're talking 4-12 GB files/directories.

One thing I still don't "get" is that FXP is supposed to make server-2-server transfers faster, that's fine but I can't see how
local_PC-2-server will go any faster because of FXP compared to sftp with multi-threading.

Does anyone think that using Pro-ftpd or Pure-ftpd with FXP enabled will be any faster than SFTP for
transfering from user's local PC to a Linux server, using FlashFXP on the user PC?
dwoods99 is offline  
Old 06-28-2008, 04:19 PM   #4
bigstar
FlashFXP Developer
FlashFXP Administrator
ioFTPD Beta Tester
 
bigstar's Avatar
 
Join Date: Oct 2001
Posts: 8,012
Default

sftp is not designed for fast file transfers, its designed for security. With that in mind sftp is extremely slow when it comes bulk data transfers and ftp is much better suited for this.

sftp is for upload and download and is not compatible with site to site transfers, it was added because many web hosting providers are cutting off ftp access in favor of sftp. even though with a proper configuration ftp ssl/tls can be secured very well, the problem is that it isn't as easy to configure and sometimes a nightmare on virtual host setups.

I'm not entirely sure what you're trying to do but in my opinion ftp is the way to go unless you're forced to use sftp for some reason.
bigstar is offline  
Old 06-28-2008, 04:42 PM   #5
dwoods99
Junior Member
 
Join Date: Jun 2008
Posts: 3
Default

Your points are quite valid.
I admit to being out of the admin and security side of servers for a few years now, however
there was too many security concerns and holes in so many various FTP programs that
a secure version was simply necessary... and I prefer to not use anything else even today.

That said, for the small number of users I need to satisfy, I believe I will setup Pro-ftpd or
Pure-ftpd with FXP enabled but restrict the valid IP addresses that can access the server.
I will attempt to still get it working within the chroot'ed jail that I have setup now for sftp users.

Paranoia takes less time to deal with than fixing hack attacks or actual break-in
dwoods99 is offline  
Old 06-28-2008, 10:42 PM   #6
MxxCon
Super Duper
FlashFXP Beta Tester
 
Join Date: Oct 2001
Location: Brooklyn, NY
Posts: 3,881
Default

Quote:
Originally Posted by dwoods99 View Post
One thing I still don't "get" is that FXP is supposed to make server-2-server transfers faster, that's fine but I can't see how
local_PC-2-server will go any faster because of FXP compared to sftp with multi-threading.
FXP transfer allow to transfer files directly between 2 servers.
If SERVER A has 100mbit connection, SERVER B has 100mbit connection but CLIENT has only 56k connection, FXP transfer will still go at full 100mbit.
data is being sent between 2 server directly bypassing client's (slow) connection.

in addition to pureftpd and proftpd, read http://vsftpd.beasts.org/
__________________
[Sig removed by Administrator: Signature can not exceed 20GB]
MxxCon is offline  
Closed Thread

Tags
flashfxp, ftp, fxp, openssh, openssh fxp, sftp

Thread Tools
Display Modes Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -5. The time now is 06:31 PM.

Parts of this site powered by vBulletin Mods & Addons from DragonByte Technologies Ltd. (Details)