- Virtual IP configurations
- Virtual users
- Standalone or inetd operation
- Powerful per-user configurability
- Bandwidth throttling
- Per-source-IP configurability
- Per-source-IP limits
- Encryption support through SSL integration
The latest vsftpd release is v3.0.4, currently at https://security.appspot.com/downloads/vsftpd-3.0.4.tar.gz
When downloading, always check the GPG signatures, of course! https://security.appspot.com/downloads/vsftpd-3.0.4.tar.gz.asc
Releases are infrequent since bug reports are infrequent at this time. Also, the FTP protocol is sunsetting, which is probably not a terrible thing.
Is vsftpd the right server for me?If your main requirement from an FTP server is one of the following things then yes, vsftpd is probably the FTP server you are looking for.
- The SAC team from SANS recommend vsftpd as the preferred secure FTP server: "For those of you looking for a secure FTP daemon alternative, the SAC team recommends vsftpd".
- IBM recommend vsftpd in their paper "Securing Linux Servers for Service Providers". It is top in a section entitled "Recommended FTP servers".
- RedHat praises the performance and scalability of vsftpd in a press release: "Individual servers handled more than 2,500 concurrent downloads"... "The other change was to use a very lightweight FTP daemon, vsftpd, designed for the demands placed on a server under this level of load".
What large sites are trusting vsftpd?NOTE!! The following list is accurate as of Jun 2004 (things may change over time of course). This is just a small sample of lots of critical internet sites which use vsftpd.
- It fixes fundamental design flaws present in most installations of wu-ftpd, proftpd and even bsd-ftpd by not over-using the dangerous root user.
- It makes use of powerful security facilities such as capabilities and chroot.
- It employs secure coding techniques to make buffer overflows a solved problem.
- It is written by someone who is a vulnerability researcher.
- A usenet poster finds vsftpd twice as fast as BSD-ftpd (which is itself no slouch, unlike wu-ftpd).
- Someone benchmarking vsftpd over localhost shifts 70Mbyte/sec, which in their case was more than the awesome TUX (55Mbyte/sec). (link lost)
- Someone bechmarking Linux's networking over gigabit ethernet is using vsftpd, and vsftpd scores 86Mbyte/sec. (link lost)
- Referring to RedHat's use of vsftpd, Alan Cox in his diary says " finally we have a scalable ftpd for Linux".
Here are a couple of graphs sent in by a satisfied user, running a large internet site with vsftpd.
Over the 24 hours, vsftpd has served 2.6TB (yes, terabytes) with a concurrent user count often over 1,500. This is on a single machine.
ContactNEW! There's a #vsftpd IRC channel at irc.freenode.net. People there may be able to answer questions.
I'm buried alive in vsftpd mail :-( You could try mailing me: Chris Evans, firstname.lastname@example.org (try and read the FAQ first)! Please don't be disappointed if your vsftpd mail does not get answered; I can only answer a small percentage.