FTP over SSL

REF: http://www.proftpd.org/docs/howto/TLS.html

RFC 4217 defines FTP over SSL/TLS:

  http://www.faqs.org/rfcs/rfc4217.html

The mod_tls module for proftpd is an implementation of RFC 4217.
RFC 2228 defines FTP Security Extensions, of which mod_tls is one implementation. Another such RFC 2228 implementation is the mod_gssmodule, available from SourceForge.
Example mod_tls configuration:

  
    # If mod_tls was built as a shared/DSO module, load it
    LoadModule mod_tls.c
  

secure data transfer

FTP may be the most popular protocol for transferring data over Internet. However, it is unencrypted by default. Here're some remedies for this issue.

• FTP over SSL. it may be affected by SSL mismatch of versions between clients and server due to SSL upgrade.
• SFTP from OpenSSH. shell access or chroot may be required.
• VPN. using VPN as secure tunnel would be easier between sites.

Software Defined, Cloud compatible File service

檔案服務的歷史由來已久。但要升級到Software Defined, Cloud compatible，思路要換一下。不是非得用當紅的SDN, SDS才能做，而可以在基礎架構上改動，使其更有彈性。

• gateway service可用市售appliance或是iptables, pf。單獨跑在一台至多台VM上。SDN from Internet由此進。其實也就是老牌CDN概念。
• file service可用SFTP, FTP, CIFS。單獨跑在一台至多台VM上。SDN in intranet由此進。
• storage service可用NFS, iSCSI，單獨跑在一台至多台VM上，外掛給file service。
• 儲存空間由storage VM來管理。根據需要進行多份replication，如rsync, GlusterFS等等。其實就當做自己在調自己想要的RAID演算法，自己做SDS。