[tahoe-dev] Use Tahoe as a real-time distributed file system?

[Brian Warner]

On 5/25/11 3:05 PM, Greg Troxel wrote:
> 
>   2) It seems one ends up listening on a port, on all addresses.
>   Ideally, there would be no internet-listening socket involved.

Actually, it's really easy to limit the listening port to the local
loopback interface (127.0.0.1). The sample configuration in
docs/frontends/FTP-and-SFTP.rst demonstrates this:

 [sftpd]
 enabled = true
 port = tcp:8022:interface=127.0.0.1
 host_pubkey_file = private/ssh_host_rsa_key.pub
 host_privkey_file = private/ssh_host_rsa_key
 accounts.file = private/ftp.accounts

I'd certainly stick to using the gateway on your own machine, to reduce
the SPOFs from two (your local SFTP-client machine, and the gateway
machine) to just one (your local SFTP-client machine).

cheers,
 -Brian