DevOps and GitOps file transfer

Operate secure file transfers through repeatable, reviewable DevOps and GitOps workflows using SFTPPlus MFT.

SFTPPlus MFT fits into existing deployment and operations workflows without requiring a custom file transfer application. Teams can keep configuration reviewable, automate administrative work, and deploy the same file transfer services consistently across environments.

Keep configuration as code

SFTPPlus stores its configuration in a plain text .INI file. The file can be reviewed with the rest of an infrastructure change, stored in version control according to your organization's security policy, and promoted through development, test, and production environments.

Configuration management tools such as Ansible and CloudFormation can install the file alongside the application. Container platforms can supply it through their standard configuration resources, including Kubernetes ConfigMaps. Credentials and other sensitive values should remain in the secret management system used by your deployment platform.

Automate administrative operations

The admin-shell command-line tool supports repeatable configuration and management operations from scripts, deployment pipelines, and remote terminals. It communicates with SFTPPlus through JSON-RPC and uses the same secure administrator login and role-based access controls as Web Manager.

Use the CLI when a pipeline needs to apply or inspect a management change on a running instance. Use the .INI file when the complete desired configuration should be deployed as a reviewed artifact.

Use a GitOps workflow

A GitOps repository can hold the SFTPPlus .INI configuration together with the deployment resources for each environment. A typical change is proposed through a pull request, reviewed by the responsible teams, and applied by the existing deployment controller after approval. The repository history then records which configuration was intended for each deployment.

This approach works for virtual machines and containers. For an orchestrated deployment, see the Kubernetes and OpenShift platform page.

Plan regular updates

SFTPPlus MFT is updated each month with new features, integrations, compatibility improvements, and fixes. DevOps teams can pin the required version, review the release notes, and promote an update through the same pipeline used for configuration changes.

Connect monitoring and workflows

SFTPPlus records file transfers and administrative actions in its audit logs. Its event handlers can send selected events to external HTTP endpoints or existing monitoring and notification services. These integrations allow operations teams to observe file transfer activity using the same systems that monitor the rest of their infrastructure.