vsftpd

Probably the most secure and fastest FTP server for UNIX-like systems.

News

Other links you may be looking for

Sep 2012 - vsftpd-3.0.2 released with seccomp sandbox fixes

Apr 2012 - vsftpd-3.0.0 released with a seccomp filter sandbox

Dec 2011 - vsftpd-2.3.5 released

Nov 2011 - Is any server other than vsftpd safe?

RedHat ftp.redhat.com is powered by vsftpd for performance reasons - see below

Suse Someone sent me this green lizard.. (ftp.suse.com)

About vsftpd

vsftpd is a GPL licensed FTP server for UNIX systems, including Linux. It is secure and extremely fast. It is stable. Don't take my word for it, though. Below, we will see evidence supporting all three assertions. We will also see a list of a few important sites which are happily using vsftpd. This demonstrates vsftpd is a mature and trusted solution.

Features

Despite being small for purposes of speed and security, many more complicated FTP setups are achievable with vsftpd! By no means an exclusive list, vsftpd will handle:

Online source / docs

Browse vsftpd's online source tree - including documentation. In particular, note the content of the EXAMPLE subdirectory. Also, here is an HTML version of the manual page which lists all vsftpd config options.

Download / support

The latest vsftpd release is v3.0.2, currently at https://security.appspot.com/downloads/vsftpd-3.0.2.tar.gz
When downloading, always check the GPG signatures, of course! https://security.appspot.com/downloads/vsftpd-3.0.2.tar.gz.asc
Releases are infrequent since bug reports are infrequent at this time.

Is vsftpd the right server for me?

If your main requirement from an FTP server is one of the following things then yes, vsftpd is probably the FTP server you are looking for. The only reason you might prefer a different FTP server to vsftpd is if you really need the configurability of one of the more bloated FTP servers. Having said this, note that vsftpd caters for the vast majority of use cases. Even if vsftpd appears to be missing a feature, it is often satisfied by an external component such as PAM or xinetd / tcp_wrappers. In this regard, vsftpd is being a small modular component in the proper spirit of UNIX. Finally, consider moving to vsftpd even if it means sacrificing some whacky feature of your current FTP server. The security, performance and stability gains are waiting for you.

What are people saying about vsftpd?

What large sites are trusting vsftpd?

NOTE!! The following list is accurate as of Jun 2004 (things may change over time of course). This is just a small sample of lots of critical internet sites which use vsftpd.

Please sell me more on vsftpd security!

Certainly. vsftpd was designed and implemented from the ground up with security in mind.
  1. It fixes fundamental design flaws present in most installations of wu-ftpd, proftpd and even bsd-ftpd by not over-using the dangerous root user.
  2. It makes use of powerful security facilities such as capabilities and chroot.
  3. It employs secure coding techniques to make buffer overflows a solved problem.
  4. It is written by someone who is a vulnerability researcher.
For more details on why vsftpd is secure, see the distributed documentation files: Online copies are here:

Please sell me more on vsftpd performance!

Of course.

Here are a couple of graphs sent in by a satisfied user, running a large internet site with vsftpd.

Over the 24 hours, vsftpd has served 2.6TB (yes, terabytes) with a concurrent user count often over 1,500. This is on a single machine.

Graph of users
Graph of traffic

Contact

NEW! There's a #vsftpd IRC channel at irc.freenode.net. People there may be able to answer questions.

I'm buried alive in vsftpd mail :-( You could try mailing me: Chris Evans, scarybeasts@gmail.com (try and read the FAQ first)! Please don't be disappointed if your vsftpd mail does not get answered; I can only answer a small percentage.

Valid HTML 4.01! Valid CSS!