SFTPGo – fully featured and highly configurable SFTP server

SFTPGo is a fully featured and highly configurable SFTP server with optional HTTP/S, FTP/S and WebDAV support.

Several storage backends are supported: local filesystem, encrypted local filesystem, S3 (compatible) Object Storage, Google Cloud Storage, Azure Blob Storage, SFTP.

This is free and open source software.

Features include:

• Support for serving local filesystem, encrypted local filesystem, S3 Compatible Object Storage, Google Cloud Storage, Azure Blob Storage or other SFTP accounts over SFTP/SCP/FTP/WebDAV.
• Virtual folders are supported: a virtual folder can use any of the supported storage backends. So you can have, for example, a user with the S3 backend mapping a GCS bucket (or part of it) on a specified path and an encrypted local filesystem on another one. Virtual folders can be private or shared among multiple users, for shared virtual folders you can define different quota limits for each user.
• Configurable custom commands and/or HTTP hooks on upload, pre-upload, download, pre-download, delete, pre-delete, rename, mkdir, rmdir on SSH commands and on user add, update and delete.
• Virtual accounts stored within a “data provider”.
• SQLite, MySQL, PostgreSQL, CockroachDB, Bolt (key/value store in pure Go) and in-memory data providers are supported.
• Chroot isolation for local accounts. Cloud-based accounts can be restricted to a certain base path.
• Per-user and per-directory virtual permissions, for each path you can allow or deny: directory listing, upload, overwrite, download, delete, rename, create directories, create symlinks, change owner/group/file mode and modification time.
• REST API for users and folders management, data retention, backup, restore and real time reports of the active connections with possibility of forcibly closing a connection.
• The Event Manager allows to define custom workflows based on server events or schedules.
• Web based administration interface to easily manage users, folders and connections.
• Web client interface so that end users can change their credentials, manage and share their files in the browser.
• Public key and password authentication. Multiple public keys per-user are supported.
• SSH user certificate authentication.
• Keyboard interactive authentication. You can easily setup a customizable multi-factor authentication.
• Partial authentication. You can configure multi-step authentication requiring, for example, the user password after successful public key authentication.
• Per-user authentication methods.
• Two-factor authentication based on time-based one time passwords (RFC 6238) which works with Authy, Google Authenticator, Microsoft Authenticator and other compatible apps.
• LDAP/Active Directory authentication using a plugin.
• Simplified user administrations using groups.
• Roles allow to create limited administrators who can only create and manage users with their role.
• Custom authentication via external programs/HTTP API.
• Web Client and Web Admin user interfaces support OpenID Connect authentication and so they can be integrated with identity providers such as Keycloak. You can find more details here.
• Data At Rest Encryption.
• Dynamic user modification before login via external programs/HTTP API.
• Quota support: accounts can have individual disk quota expressed as max total size and/or max number of files.
• Bandwidth throttling, with separate settings for upload and download and overrides based on the client’s IP address.
• Data transfer bandwidth limits, with total limit or separate settings for uploads and downloads and overrides based on the client’s IP address. Limits can be reset using the REST API.
• Per-protocol rate limiting is supported and can be optionally connected to the built-in defender to automatically block hosts that repeatedly exceed the configured limit.
• Per-user maximum concurrent sessions.
• Per-user and global IP filters: login can be restricted to specific ranges of IP addresses or to a specific IP address.
• Per-user and per-directory shell like patterns filters: files can be allowed, denied and optionally hidden based on shell like patterns.
• Automatically terminating idle connections.
• Automatic blocklist management using the built-in defender.
• Geo-IP filtering using a plugin.
• Atomic uploads are configurable.
• Per-user files/folders ownership mapping: you can map all the users to the system account that runs SFTPGo (all platforms are supported) or you can run SFTPGo as root user and map each user or group of users to a different system account (*NIX only).
• Support for Git repositories over SSH.
• SCP and rsync are supported.
• FTP/S is supported. You can configure the FTP service to require TLS for both control and data connections.
• WebDAV is supported.
• ACME protocol is supported. SFTPGo can obtain and automatically renew TLS certificates for HTTPS, WebDAV and FTPS from Let’s Encrypt or other ACME compliant certificate authorities, using the HTTP-01 or TLS-ALPN-01 challenge types.
• Two-Way TLS authentication, aka TLS with client certificate authentication, is supported for REST API/Web Admin, FTPS and WebDAV over HTTPS.
• Per-user protocols restrictions. You can configure the allowed protocols (SSH/HTTP/FTP/WebDAV) for each user.
• Prometheus metrics are supported.
• Support for HAProxy PROXY protocol: you can proxy and/or load balance the SFTP/SCP/FTP service without losing the information about the client’s address.
• Easy migration from Linux system user accounts.
• Portable mode: a convenient way to share a single directory on demand.
• SFTP subsystem mode: you can use SFTPGo as OpenSSH’s SFTP subsystem.
• Performance analysis using built-in profiler.
• Configuration format is at your choice: JSON, TOML, YAML, HCL, envfile are supported.
• Log files are accurate and they are saved in the easily parsable JSON format (more information).
• Plugin system and therefore can be extended using external plugins.
• Infrastructure as Code (IaC) support using the Terraform provider.

Website: github.com/drakkan/sftpgo
Support:
Developer: Nicola Murino
License: GNU Affero General Public License v3.0

SFTPGo is written in Go. Learn Go with our recommended free books and free tutorials.

Return to FTP Servers

Popular series
	The largest compilation of the best free and open source software in the universe. Each article is supplied with a legendary ratings chart helping you to make informed decisions.
	Hundreds of in-depth reviews offering our unbiased and expert opinion on software. We offer helpful and impartial information.
	Replace proprietary software with open source alternatives: Google, Microsoft, Apple, Adobe, IBM, Autodesk, Oracle, Atlassian, Corel, Cisco, Intuit, and SAS.
	Awesome Free Linux Games Tools showcases a series of tools that making gaming on Linux a more pleasurable experience. This is a new series.
	Machine Learning explores practical applications of machine learning and deep learning from a Linux perspective. We've written reviews of more than 40 self-hosted apps. All are free and open source.
	New to Linux? Read our Linux for Starters series. We start right at the basics and teach you everything you need to know to get started with Linux.
	Alternatives to popular CLI tools showcases essential tools that are modern replacements for core Linux utilities.
	Essential Linux system tools focuses on small, indispensable utilities, useful for system administrators as well as regular users.
	Linux utilities to maximise your productivity. Small, indispensable tools, useful for anyone running a Linux machine.
	Surveys popular streaming services from a Linux perspective: Amazon Music Unlimited, Myuzi, Spotify, Deezer, Tidal.
	Saving Money with Linux looks at how you can reduce your energy bills running Linux.
	Home computers became commonplace in the 1980s. Emulate home computers including the Commodore 64, Amiga, Atari ST, ZX81, Amstrad CPC, and ZX Spectrum.
	Now and Then examines how promising open source software fared over the years. It can be a bumpy ride.
	Linux at Home looks at a range of home activities where Linux can play its part, making the most of our time at home, keeping active and engaged.
	Linux Candy reveals the lighter side of Linux. Have some fun and escape from the daily drudgery.
	Getting Started with Docker helps you master Docker, a set of platform as a service products that delivers software in packages called containers.
	Best Free Android Apps. We showcase free Android apps that are definitely worth downloading. There's a strict eligibility criteria for inclusion in this series.
	These best free books accelerate your learning of every programming language. Learn a new language today!
	These free tutorials offer the perfect tonic to our free programming books series.
	Linux Around The World showcases usergroups that are relevant to Linux enthusiasts. Great ways to meet up with fellow enthusiasts.
	Stars and Stripes is an occasional series looking at the impact of Linux in the USA.