Nick Craig-Wood 46d09fd52e serve s3: fix misleading anonymous access log and add test for auth proxy via rc GHSA-p569-5gjg-9cmj CVE-PENDING
From v1.70.0 until the serve Provider refactor (f425f8d46), an S3 server started
through the rc serve/start API with a per-server proxyOpt.AuthProxy
decided whether to enable proxy authentication by checking the
process-global proxy.Opt.AuthProxy instead of the supplied
proxyOpt.AuthProxy. In the normal rc case the global is empty, so the
auth proxy was silently ignored and the server served the fixed
filesystem supplied to serve/start rather than routing each access key
to the backend chosen by the proxy, bypassing the operator's intended
per-key authorization.

The Provider refactor fixed this incidentally by building the provider
from the proxyOpt passed to the constructor. This adds a regression test
so the per-server option cannot silently stop working again, and only
logs "allowing anonymous access" when neither an auth key nor an auth
proxy is configured so the log reflects the effective mode.
2026-09-04 19:00:22 +01:00
2026-09-04 19:00:22 +01:00
2026-04-11 15:27:05 +01:00
2026-05-15 20:12:47 +02:00
2025-08-22 11:42:51 +01:00
2026-07-31 16:56:33 +01:00
2026-07-31 16:56:33 +01:00
2026-07-31 16:56:33 +01:00
2020-10-28 18:16:23 +00:00
2026-07-31 16:56:33 +01:00
2019-09-29 11:05:10 +01:00
2026-07-31 18:21:36 +01:00

rclone logo

rclone logo

Website | Documentation | Download | Contributing | Changelog | Installation | Forum

Build Status Go Report Card GoDoc Docker Pulls

Rclone

Rclone ("rsync for cloud storage") is a command-line program to sync files and directories to and from different cloud storage providers.

Storage providers

  • 1Fichier 📄
  • Akamai Netstorage 📄
  • Alibaba Cloud (Aliyun) Object Storage System (OSS) 📄
  • Amazon S3 📄
  • ArvanCloud Object Storage (AOS) 📄
  • Bizfly Cloud Simple Storage 📄
  • Backblaze B2 📄
  • Box 📄
  • Ceph 📄
  • China Mobile Ecloud Elastic Object Storage (EOS) 📄
  • Citrix ShareFile 📄
  • Cloudflare R2 📄
  • Cloudinary 📄
  • Cubbit DS3 📄
  • DigitalOcean Spaces 📄
  • Digi Storage 📄
  • Dreamhost 📄
  • Drime 📄
  • Dropbox 📄
  • Enterprise File Fabric 📄
  • Exaba 📄
  • Fastly Object Storage 📄
  • Fastmail Files 📄
  • FileLu 📄
  • Filen 📄
  • Files.com 📄
  • FlashBlade 📄
  • FTP 📄
  • GoFile 📄
  • Google Cloud Storage 📄
  • Google Drive 📄
  • Google Photos 📄
  • HDFS (Hadoop Distributed Filesystem) 📄
  • Hetzner Object Storage 📄
  • Hetzner Storage Box 📄
  • HiDrive 📄
  • Hitachi Content Platform (HCP) 📄
  • HTTP 📄
  • Huawei Cloud Object Storage Service(OBS) 📄
  • Huawei Drive 📄
  • iCloud Drive 📄
  • ImageKit 📄
  • Internet Archive 📄
  • Internxt 📄
  • Jottacloud 📄
  • IBM COS S3 📄
  • Impossible Cloud 📄
  • Intercolo Object Storage 📄
  • IONOS Cloud 📄
  • Koofr 📄
  • Leviia Object Storage 📄
  • Liara Object Storage 📄
  • Linkbox 📄
  • Linode Object Storage 📄
  • Magalu Object Storage 📄
  • Mail.ru Cloud 📄
  • Memset Memstore 📄
  • MEGA 📄
  • MEGA S4 Object Storage 📄
  • Memory 📄
  • Microsoft Azure Blob Storage 📄
  • Microsoft Azure Files Storage 📄
  • Microsoft OneDrive 📄
  • Minio 📄
  • Nextcloud 📄
  • Blomp Cloud Storage 📄
  • OpenDrive 📄
  • OpenStack Swift 📄
  • Oracle Cloud Storage 📄
  • Oracle Object Storage 📄
  • Outscale 📄
  • OVHcloud Object Storage (Swift) 📄
  • OVHcloud Object Storage (S3-compatible) 📄
  • ownCloud 📄
  • pCloud 📄
  • Petabox 📄
  • PikPak 📄
  • Pixeldrain 📄
  • premiumize.me 📄
  • put.io 📄
  • Proton Drive 📄
  • QingStor 📄
  • Qiniu Cloud Object Storage (Kodo) 📄
  • Rabata Cloud Storage 📄
  • Quatrix 📄
  • Rackspace Cloud Files 📄
  • RackCorp Object Storage 📄
  • rsync.net 📄
  • Scaleway 📄
  • Scality (RING / ARTESCA) 📄
  • Seafile 📄
  • Seagate Lyve Cloud 📄
  • SeaweedFS 📄
  • Selectel Object Storage 📄
  • Servercore Object Storage 📄
  • SFTP 📄
  • Shade 📄
  • SMB / CIFS 📄
  • Spectra Logic 📄
  • Storj 📄
  • SugarSync 📄
  • Synology C2 Object Storage 📄
  • Tencent Cloud Object Storage (COS) 📄
  • Uloz.to 📄
  • US3 Object Storage 📄
  • Wasabi 📄
  • WebDAV 📄
  • Yandex Disk 📄
  • Zadara Object Storage 📄
  • Zero Services (ZERO-Z3) 📄
  • Zoho WorkDrive 📄
  • Zata.ai 📄
  • The local filesystem 📄

Please see the full list of all storage providers and their features

Virtual storage providers

These backends adapt or modify other storage providers

  • Alias: rename existing remotes 📄
  • Archive: read archive files 📄
  • Cache: cache remotes (DEPRECATED) 📄
  • Chunker: split large files 📄
  • Combine: combine multiple remotes into a directory tree 📄
  • Compress: compress files 📄
  • Crypt: encrypt files 📄
  • Hasher: hash files 📄
  • Union: join multiple remotes to work together 📄

Features

  • MD5/SHA-1 hashes checked at all times for file integrity
  • Timestamps preserved on files
  • Partial syncs supported on a whole file basis
  • Copy mode to just copy new/changed files
  • Sync (one way) mode to make a directory identical
  • Bisync (two way) to keep two directories in sync bidirectionally
  • Check mode to check for file hash equality
  • Can sync to and from network, e.g. two different cloud accounts
  • Optional large file chunking (Chunker)
  • Optional transparent compression (Compress)
  • Optional encryption (Crypt)
  • Optional FUSE mount (rclone mount)
  • Multi-threaded downloads to local disk
  • Can serve local or remote files over HTTP/WebDAV/FTP/SFTP/DLNA

Installation & documentation

Please see the rclone website for:

Downloads

License

This is free software under the terms of the MIT license (check the COPYING file included in this package).

S
Description
Forked rclone with Dropbox ListR, --delta-list bisync, fail-closed listings
Readme
200 MiB
Languages
Go 98.5%
Shell 0.4%
Python 0.4%
HTML 0.3%
JavaScript 0.2%
Other 0.1%