SFTP Server | Support by cloudimg

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

Overview This is a production ready SFTP file transfer server built on OpenSSH, the open source secure shell suite trusted across the internet. The image delivers a fully configured, security hardened SFTP service within minutes of launch, so you can onboard users and move files securely without hand editing sshd configuration.

Chroot Jailed Users Every SFTP user is locked into their own home directory with an OpenSSH chroot jail. A user can only see and write inside their own space, never the rest of the filesystem, and is given no interactive shell. User home directories live on a dedicated, independently resizable storage volume kept separate from the operating system disk.

SSH Key And Password Authentication The image ships key only, the secure default and a requirement of the AWS Marketplace image scan. Users authenticate with an SSH key out of the box, and password authentication can be enabled for SFTP users with a single command, or automatically the first time you create a password user. The administrator account always stays key only. SSH keys for SFTP users are managed in a central, root owned location outside every jail, so file ownership rules are always correct and no part of a jail is left writable.

One Command User Management A small set of management tools makes day to day operation simple: create a user with an SSH key or a generated password, set a per user disk quota, list users and their usage, reset or lock passwords, enable or disable password logins, and remove users. These tools are the primary interface to the server.

Hardened By Default The server ships with brute force protection that bans repeat offenders, per user disk quotas so one account cannot fill the disk, and transfer audit logging that records every upload, download and delete to the system journal for compliance. Password authentication is off by default and forwarding features are switched off.

Ready To Use A per instance demo user is created on first boot with a fresh SSH key unique to the instance, stored in a root only file, so you can confirm the server works immediately, then remove it once your own users exist. The user guide covers creating key based and password based users, the chroot model, quotas, reading the audit log and connecting from common clients.

cloudimg Support 24/7 technical support by email and chat. Help with SFTP user onboarding, key management, chroot configuration, quotas, auditing and secure file transfer architecture.

Use Cases Secure file exchange with customers and partners. Managed file transfer and drop boxes. Application and backup upload targets. Per user isolated storage. Compliance focused transfer with audit trails.

All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.