Hacker News Reader

Comment by knorker | Hacker News Reader

Does server to server transfer using FXP, though.

What other protocol does that?

SSH can actually do that.

FTP does FXP without either server knowing credentials of the other.

How does what you say "SSH" accomplish server to server transfer without exposing credentials of one server to another?

scp bob@host1:/tmp/x john@host2:/tmp/

Also SSH can be configured to use different keys for each server.

now do that without dragging all the data through your workstation.

Recent versions of OpenSsh don't drag the data through your workstation unless you pass "-3" (for triangle routing).

Don't you still need credentials for server A to set up an SSH connection to server B? The question was to avoid that.

The scp protocol is deprecated, the scp command is alive and well.

One poor answer is SSH agent forwarding [1]. At best some SSH agents will prompt at each use, but that's questionable security.

Using something like magic wormhole[2] could work. SSH to both sides and run the required commands.

ssh to one side and run rsync

that exposes your credentials to one of the servers. probably doesn't matter in most cases but it's not as cool as the scp solution suggested here