proxy support about goftp

[muirdm]

I'm not too familiar with FTP proxies. Can you just connect directly to the proxy? It seems like most proxies accept the remote server after an @ sign in the username, e.g. a username of [email protected].

[rpetti]

FTP proxies are just HTTP Connect proxies. Usually you define it by setting the FTP_PROXY environment variable, which is analogous to the HTTP_PROXY and HTTPS_PROXY env vars.

They aren't FTP servers themselves, so connecting directly to it with an FTP client won't work.

[muirdm]

You are saying it proxies FTP over HTTP? When I googled for FTP proxy, all I saw are actual FTP proxy servers where you connect to them using FTP, and they proxy to other FTP servers. Do you have a link describing how your FTP proxy works?

[rpetti]

It's a standard web proxy that you would find at most companies:
https://en.wikipedia.org/wiki/Proxy_server#Web_proxy_servers

Our specific one is Squid, and we need to use it in order to access resources on the internet.

Essentially, an application will read the proxy configuration from the environment or elsewhere, then instead of connecting to the target server directly it will open a tunnel through the proxy using an HTTP CONNECT request. After the connection is established it's used by the application as normal.

Here's an example configuration from filezilla:
https://www.youngzsoft.net/ccproxy/faq_66.htm

Here's an example for lftp:
https://www.librebyte.net/en/ftp/lftp-behind-a-proxy/

I was looking for similar instructions for this client, but after examining the code it doesn't appear to support proxies at all...

[muirdm]

Thanks!

I have no plans to support proxies like this in goftp. It seems like they are various kinds of proxies and they fall outside the purvey of ftp itself.

We could add the ability to create an ftp connection given a generic net.Conn so the user's code could set up the proxy connection and pass that to goftp. Would that solve your problem?

[rpetti]

That would work for any other protocol except FTP. Without knowing what ports the ftp session needs for data transfers, there's no way to create the correct connections ahead of time.

I'm going to see if I can wrap our app in something that can catch connections, or see if there's a way to forward all traffic through the proxy using redsocks and iptables... Failing that I guess we'll just need to rewrite our app using something else.

Thanks anyways!

[machship-mm]

I have implemented this on my fork of the repo and created a pull request #55

I have used this in conjunction with mwitkow/go-http-dialer to be able to make connections via squid proxy.