SFTP Gateway Classic

website·Indexed 34 days ago

https://help.thorntech.com/sftp-gateway/

Documentation for SFTP Gateway Classic, a secure, pre-configured SFTP server that saves uploaded files to Amazon S3 buckets. Covers installation via AWS CloudFormation, SSH key pair management, S3 server-side encryption (SSE-S3, SSE-C, and KMS), multi-threaded upload support, and 2FA setup using Google Authenticator.

Tokens
779.2K
Snippets
3.2K
Records
5.6K
Agent score
60%

What's inside SFTP Gateway

  1. Overview of SFTP Gateway Observability Stack

    The SFTP Gateway observability stack transforms raw plain-text audit logs from /opt/sftpgw/log/ into searchable, queryable data. It consists of four main components:

    • Alloy: Collects and parses SFTP Gateway log files to extract structured fields (username, action, IP, etc.) and forwards them to Loki.
    • Loki: A log storage system (similar to Prometheus for logs) that stores logs in a compressed, indexed format.
    • Grafana: The visualization layer used to build dashboards, search logs via LogQL, and set up alerts.
    • nginx: A reverse proxy that provides secure HTTPS access to Grafana via the /grafana/ path on port 443.
  2. Overview of SFTP Gateway REST API

    The SFTP Gateway REST API allows for the programmatic management of the gateway, including the creation of cloud connections, folders, and SFTP users. The general workflow for creating a new SFTP user is: Get OAuth token → Create Cloud Connection → Create Folder → Create User. The API documentation is available in OpenAPI JSON format.
    // OpenAPI Specification
    https://thorntech-public-documents.s3.amazonaws.com/sftpgateway/KB/openapi.json
  3. Overview of SFTP Gateway for Azure

    SFTP Gateway is a pre-configured SFTP server designed to transfer files to Azure Blob Storage. The workflow involves an administrator creating an SFTP user via a web interface; the SFTP user then uploads files to the server, which automatically pushes them to Azure Blob Storage and deletes the local copy upon successful transfer.
  4. Overview of SFTP Gateway Log Observability Stack

    The SFTP Gateway observability stack transforms raw plain-text audit logs from /opt/sftpgw/log/ into searchable, queryable data via a real-time dashboard. The stack consists of four primary components:

    • Alloy: Collects and parses SFTP Gateway log files to extract structured fields (username, action, IP address) and forwards them to Loki.
    • Loki: A compressed, indexed log storage system (similar to Prometheus for logs).
    • Grafana: The visualization layer used for searching logs, building dashboards, and setting alerts.
    • nginx: A reverse proxy providing secure HTTPS access (port 443) to Grafana at the /grafana/ path.