High-performance and secure FTP/FTPS server for QNAP NAS
glFTPd brings the well-known glFTPd FTP server to QNAP NAS with a modern, secure and easy-to-use web administration interface.
Designed specifically for QNAP environments, the package combines the performance and flexibility of glFTPd with a dedicated management layer for configuration, monitoring, security, users, groups, sections, backups and activity auditing.
Main Features
- High-performance glFTPd FTP server
- FTP and FTPS support
- Dedicated HTTPS administration interface
- Responsive and modern Web UI
- 20 selectable interface languages
- Automatic browser language detection
- User and group overview
- FTP section monitoring
- Active FTP session monitoring
- Process PID display
- Server uptime monitoring
- Passive FTP port range configuration
- TLS certificate management
- Integrated configuration editor
- Configuration validation before applying changes
- Configuration backups and snapshots
- Storage and free-space monitoring
- Runtime health checks
- Detailed server logs
- Dedicated security audit log
- Exportable diagnostic and audit information
- QTS event log integration
- FTP login success/failure notifications
- Dark, lightweight administration interface
Security
The administration interface is served exclusively over HTTPS with TLS 1.2 or newer.
Token authentication can be enabled or disabled from the Web Security settings. On a new installation, a cryptographically random administrator token is generated automatically and reported once through the QTS event log.
The administrator can later change or reset the token directly from the Configuration page.
Administrator tokens are not stored in plain text. Authentication information is stored as a salted cryptographic hash, while sensitive manager keys use restrictive filesystem permissions.
Security-related operations are recorded in a dedicated encrypted audit log using AES-256-GCM.
Changing or resetting the administrator token automatically invalidates existing authenticated web sessions.
Audit & Logging
glFTPd provides a dedicated Audit & Export section for centralized activity tracking.
Events include:
- Successful and failed Web authentication
- Successful and failed FTP authentication
- API authentication failures
- Configuration modifications
- Security setting changes
- Token changes and resets
- Backup creation
- FTP session termination
- Runtime audits
- Audit exports
Audit information can be exported as an encrypted bundle protected by a user-defined passphrase.
Monitoring
The dashboard provides an immediate overview of the running server, including:
- FTP/FTPS port
- HTTPS administration port
- Passive port range
- Manager PID
- Manager uptime
- Active FTP sessions
- FTP worker PIDs
- Connected remote addresses
- User and group counts
- Storage capacity
- Available disk space
- TLS status
Active FTP sessions can also be terminated directly from the administration interface.
Configuration & Data Protection
The package follows an upgrade-safe directory layout.
Existing configuration, users, groups, certificates, FTP data, logs, backups and security information are preserved during package upgrades.
Application-generated data remains under:
/opt/glFTPd-Q5
Main locations include:
/opt/glFTPd-Q5/config – configuration and certificates
/opt/glFTPd-Q5/data – FTP data and glFTPd runtime tree
/opt/glFTPd-Q5/logs – application and audit logs
/opt/glFTPd-Q5/backups – configuration backups
/opt/glFTPd-Q5/var – persistent application state
/opt/glFTPd-Q5/run – runtime state and PID information
/opt/glFTPd-Q5/tmp – temporary application files
Multilingual Web Interface
The administration interface supports 20 languages:
English, French, German, Spanish, Italian, Portuguese, Dutch, Polish, Czech, Slovak, Hungarian, Romanian, Swedish, Norwegian, Danish, Finnish, Turkish, Japanese, Korean and Chinese.
Language selection is available directly from the login screen and remains available throughout the administration interface.
QNAP Integration
The package integrates with the QTS event logging system.
Important server events, startup information and FTP authentication events can therefore be reviewed directly from QTS/QuLog without having to inspect command-line log files.
Architecture Support
The package is designed for:
- x86_64
- AArch64 / ARM64
- ARMHF / ARMv7
The build process performs architecture and ELF compatibility checks before packaging the application.
For QTS 5 compatibility, the selected glFTPd runtime is automatically checked against the required GLIBC 2.21 maximum compatibility target.
Default Network Configuration
HTTPS Web Administration: https://NAS-IP:14531
FTP/FTPS: NAS-IP:13321
Passive FTP range: 50000-50399
All network parameters can be adjusted from the administration interface.
Quick Start
- Install and start the glFTPd QPKG.
- Open
https://NAS-IP:14531in your browser. - On a fresh installation, retrieve the initial administrator token from the QTS event log.
- Select your preferred language from the login page.
- Authenticate using the administrator token.
- Review the Network & TLS settings and configure the FTP port and passive port range if required.
- Configure users, groups, sections and FTP content according to your environment.
- Review Configuration → Web Security to change the initial token or adjust authentication settings.
- Check Audit & Export and Runtime Audit to verify the server configuration and security status.
The initial administrator token is intended for first-time access. It can subsequently be changed or reset from the Web Security section.
Administrator Token Recovery
If access to the administration interface is lost, the administrator token can be reset from SSH using:
/opt/glFTPd-Q5/reset-token.sh
The newly generated token is displayed in the terminal.
