Theme
What is Syncplify R2FS!?
Syncplify R2FS! (Remote-Reverse File System) is an optional component of Syncplify Server! designed to securely expose internal storage to your SFTP transfer server without opening inbound network access.
The core idea
Traditional architectures require the server in the DMZ to initiate inbound connections toward the backend storage. R2FS! inverts this model: the storage side initiates and maintains an outbound, secure connection to the server. This "reverse" approach dramatically reduces the attack surface and simplifies firewall rules.
How it fits in
R2FS! integrates with the Virtual File System (VFS) of Syncplify Server!. To users accessing Syncplify Server! through its protocol handlers (SFTP, FTPS, HTTPS), remote storage appears as a normal file system path, even though it physically resides in a protected network.
Why it matters
- No inbound firewall ports toward the internal storage subnet
- Strong authentication using mutual TLS and/or PSK
- Clear network separation between the DMZ and the private infrastructure
- Compliance friendly design for regulated and highly regulated environments
- Scales naturally, supporting multiple R2FS! nodes and high availability setups
Typical use case
An organization runs Syncplify Server! in a DMZ, while file data remains on internal systems in a separate, isolated subnet. R2FS! allows secure access to that data without exposing the internal network and without relaxing firewall policies.
In short
Syncplify R2FS! provides a secure, modern way to bridge file transfer services hosted in the DMZ with internal storage, by reversing the direction of trust and connectivity.