libfuse/sshfs
Sshfs
SSHFS is a network filesystem client that maps remote server directories to local mount points. It functions as a userspace implementation of a filesystem, allowing users to access and manage remote files as if they were on a local disk using the SFTP protocol over SSH.
The tool distinguishes itself by offering multiple transport options, including encrypted SSH tunnels for security and direct TCP socket connections to bypass encryption for higher throughput. It also supports connectivity via virtual sockets to access directories hosted inside virtual machines.
The system includes capabilities for performance tuning through metadata and directory caching, asynchronous writeback buffering, and direct I/O reading. It handles security and administration via user identity mapping, local permission enforcement, and filesystem access controls.
Remote directories can be configured for automated mounting during the system boot process.
Features
- Filesystem Mounts - Provides a way to attach remote SFTP directories to the local directory tree as a mountable filesystem.
- Remote File System Mounts - Maps remote server directories to local mount points, allowing remote storage to be managed as a local filesystem.
- Metadata Caching - Caches file attributes and metadata locally to reduce network round-trips for individual file information.
- SFTP Subsystems - Utilizes the SFTP subsystem to transfer files and manage directory structures over a secure channel.
- Remote Administration - Provides a mechanism for managing files and directories on a remote host without manual transfers.
- Development Directory Mappings - Maps remote server paths to local directories to enable standard filesystem operations on remote data.
- Remote Storage Protocols - Implements a remote storage protocol to manage data on a server using standard local file operations.
- FUSE Implementations - Uses a FUSE implementation to bridge the kernel virtual filesystem to a user-space process for remote mounting.
- FUSE Virtual Filesystems - Functions as a userspace filesystem that maps remote server directories to local mount points.
- SSH Tunneling - Encapsulates filesystem traffic within encrypted SSH tunnels to ensure secure remote data access.
- Asynchronous Write Buffering - Implements asynchronous write buffering to decouple local file writes from remote server synchronization for improved performance.
- Filesystem Metadata Caches - Stores file attributes and directory entries locally to reduce the number of network requests for repetitive lookups.
- Page Caching Controls - Provides controls to adjust kernel page cache and directory cache intervals to minimize remote lookups.
- Filesystem Access Controls - Restricts mount access to specific local users or grants permissions to others on the host machine.
- TCP Socket Clients - Provides a direct TCP socket connection to SFTP servers to bypass SSH encryption for higher throughput.
- Network Connectivity Configurations - Implements automated reconnection and configurable delays to manage the stability of the remote filesystem connection.
- Transfer Optimizations - Uses concurrent connections and asynchronous writeback to optimize the speed of large file transfers.
- Virtual Socket Tunnels - Enables connectivity to filesystems inside virtual machines using virtual socket (VSOCK) tunnels.
- Bypass Mechanisms - Allows bypassing SSH encryption via direct TCP port or vsock connections for increased throughput.
- Network Filesystem Tuning - Optimizes data transfer speeds and reduces latency through metadata caching and direct I/O configurations.
- Guest-Host File Access - Links to filesystems hosted inside virtual machines using sockets to move data between host and guest environments.
- Local Permission Overrides - Enforces local permission checking on the mount to override default behaviors that ignore remote file permissions.
- Encryption Bypasses - Enables connecting directly to SFTP servers by bypassing SSH encryption in trusted networks to improve speed.
- User Namespace Mappings - Translates remote user and group identifiers into local equivalents to maintain consistent file ownership.
- Network Tunneling - Filesystem client based on the SSH file transfer protocol.
