Syncplify Server! v6.0.23 released

Importance of this update: NORMAL
Fixed
  • Restore/import from V4/V5: group accounts are now imported without square brackets
  • The “encrypted” switch for VFSs now behaves as expected
  • Poor performance of file uploads via WebClient! (HTTPS protocol) has been completely resolved (all other protocols were never affected by this)
Improved
  • Editing of SuperAdmin, Admin, and User accounts
  • Better choice of initial location (directory) for log files when a new virtual site is created (existing virtual sites are not affected nor changed)
  • Manual was greatly improved, new pages and sections were added
  • The sliding-window used to feed the real-time dashboard is now double-buffered for much better performance and a lot less context-switches

Upgrading from v6.0.x is a simple and fairly automatic process: simply download the latest version from the official download page, and install it over the existing version, all of your settings and license will be kept.

If, instead, you’re upgrading from an older (v4/v5) version, you find the upgrade instructions in our knowledge base.

Thank you all for trusting our software with your secure file transfers!


Syncplify Server! v6.0.21 released

Today we released Syncplify Server! v6.0.21; here’s what’s new and improved in this version.

Importance of this update: VERY IMPORTANT
Fixed
  • Permission-check for specific FTP types (FTP, FTPS, FTPES) is now carried out correctly
  • Importing of LDAP users from old V4/V5 backup files now works correctly, as long as at least one verifiable LDAP server profile is found in the old V4/V5 backup file
  • Blocklist now correctly checks and updates CIDR items
  • FTP(E/S) sessions are now decremented correctly when they terminate (no more dashboard poisoning)
Improved
  • Installer now automatically runs DB maintenance tasks if/when needed
  • Integrated most up-to-date Go crypto library (various fixes and improvements)
  • Importing of supported SSH host keys from V4/V5 backups has been improved
  • Improved blocklist performance (speed) by 80% on average
  • Upgraded SyngoDB to v4.5.2 (latest)
Added
  • Added --update, --norollback and --trace command-line options to CLI installer
  • Use of SIMD-accelerated SHA256 (if CPU supports it)
  • Added support for custom hash sub-commands to the SSH2 protocol handler’s exec command
  • Added wildcard directory listing option to all VFS types

Upgrading from v6.0.x is a simple and fairly automatic process: simply download the latest version from the official download page, and install it over the existing version, all of your settings and license will be kept.

If, instead, you’re upgrading from an older (v4/v5) version, you find the upgrade instructions in our knowledge base.

Thank you all for trusting our software with your secure file transfers!


For those who use(d) DiskAES256 VFSs

The DiskAES256 virtual file system (VFS) type provided at-rest encryption in Syncplify.me Server! v4.x and v5.x, and served its purpose well for several years, but it got old, and in IT lingo “old” means that it can’t be considered secure anymore. It uses the AES-256 algorithm in a simplified version of the XTS mode, so we decided to retire it while it’s still unbroken.

In fact, at-rest encryption in Syncplify Server! v6.x will be provided by a state-of-the-art implementation of the AES-256 algorithm in GCM mode (authenticated encryption) with per-stream unique initialization vectors.

Not only this improves security by leaps, but (unlike v4 and v5) this method is applicable to all virtual file system types. Yes, with v6.x you’ll be able to apply AES-GCM encryption also to your S3, Azure, Google, and SFTP virtual file systems, not just the disk-based ones!

This gigantic step forward, though, comes with a small trade-off: version 6.x will no longer be able to access or support the old DiskAES256 encryption, so a method to decrypt your old DiskAES256 storage is needed, in order to move those folders and files over to the new v6.x high-security standard.

Upon release of Syncplify Server! v6.x we will therefore also release this tiny app to decrypt your old DiskAES256-encrypted folders, so that you can then migrate them over to the new and more secure server version.

We have finished testing this little app, and we’ll make it available for free to all users (including users of the free edition) of our previous Server! versions upon release of v6.x.


V6 VFSs include: Disk, S3, Azure, Google Cloud, SFTP (all with optional at-rest encryption)

Syncplify.me Server! versions 1 through 5 have always historically supported only 2 typed of Virtual File Systems (VFS):

  1. Disk (with optional at-rest encryption via DiskAES256)
  2. SFTP (encrypted over the network but not at-rest on the remote site)

When Syncplify Server! v6 is released, though, depending on the edition you use it will include the following Virtual File System (VFS) types:

  1. Disk (local drives and SSDs, and remote NAS, SAN, iSCSI, …)
  2. Amazon S3 (store data in your AWS S3 bucket)
  3. Microsoft Azure Blob Storage (store data in Azure Cloud)
  4. Google Cloud Storage (store data in Google Cloud Platform)
  5. SFTP (store data on another SFTP server, useful for SFTP-proxying)

And all of them will also feature encryption at-rest on whatever local or remote storage they point to.