Editing File Transfer Protocol (section)

===FTP over SSH=== <!-- This section is linked from [[OpenSSH]] -->
FTP over SSH is the practice of tunneling a normal FTP session over a Secure Shell connection.<ref name="nurdle"/> Because FTP uses multiple [[Transmission Control Protocol|TCP]] connections (unusual for a TCP/IP protocol that is still in use), it is particularly difficult to tunnel over SSH. With many SSH clients, attempting to set up a tunnel for the control channel (the initial client-to-server connection on port 21) will protect only that channel; when data is transferred, the FTP software at either end sets up new TCP connections (data channels) and thus have no [[confidentiality]] or [[integrity protection]].

Otherwise, it is necessary for the SSH client software to have specific knowledge of the FTP protocol, to monitor and rewrite FTP control channel messages and autonomously open new [[packet forwarding]]s for FTP data channels. Software packages that support this mode include:
* Tectia ConnectSecure (Win/Linux/Unix)<ref>{{cite web|url=https://www.ssh.com/manuals/mft-events-product/63/ssh-solutions-your-business-components.html|title=Components of the Information Assurance Platform (section Tectia ConnectSecure)|website=ssh.com|archive-url=https://web.archive.org/web/20200731160323/https://www.ssh.com/manuals/mft-events-product/63/ssh-solutions-your-business-components.html|archive-date=2020-07-31}}</ref> of [[SSH Communications Security]]'s software suite

FTP over SSH should not be confused with [[SSH File Transfer Protocol]] (SFTP).