Home / server / Questions / 825865
In Process
gamelton
Asked: 2017-01-13 05:51:36 +0800 CST

SFTP reverse proxy

  • 772

Serverfaulters.

Short: I'd like to publish several SFTP servers through one server (reverse proxy/relay). How could I do that?

Long: there are three components:

                                    ----> sftp-server1.local
                                    |     port: 22
Filezilla  ----> sftp-proxy.org ----
SFTP client      port: 22           |
                                    ----> sftp-server2.local
                                          port: 22
  • Filezilla - SFTP client
  • sftp-proxy.org - available from the internet server
  • sftp-server*.local - internal SFTP servers
  • sftp-user* - user accounts on SFTP servers

Case: internet user opens Filezilla, enters sftp-proxy.org with login sftp-user1 and gets on sftp-server1.local. Another user enters sftp-proxy.org with login sftp-user2 and gets on sftp-server2.local. So SFTP-proxy.org redirects user to internal SFTP server based on his username.

I've found this sshd_config for sftp-proxy.org:

Match User sftp-user1
    ForceCommand ssh -t [email protected] $SSH_ORIGINAL_COMMAND
Match User sftp-user2
    ForceCommand ssh -t [email protected] $SSH_ORIGINAL_COMMAND

But they say it won't work, is that so?

Note: I would like to find the solution that client is user friendly (default Filezilla, no ssh options).

ssh sftp reverse-proxy

0 Answers