Overview

View Source

Trivial File Transfer Protocol (TFTP) is a very simple protocol used to transfer files over the transport datagram protocol UDP.

On the client side, function read_file/3 and write_file/3 spawn a temporary client process establishing contact with a TFTP daemon and perform the file transfer.

tftp uses a callback module to handle the file transfer. Two such callback modules are provided, tftp_binary and tftp_file. See read_file/3 and write_file/3 for details. You can also implement your own callback modules, see callbacks.

Security Considerations

As stated in (RFC 1350) be aware that "Since TFTP includes no login or access control mechanisms, care must be taken in the rights granted to a TFTP server process so as not to violate the security of the server hosts file system. TFTP is often installed with controls such that only files that have public read access are available via TFTP and writing files via TFTP is disallowed."

This essentially means that any machine on the network that can reach the TFTP server is able to read and write, without authentication, any file on the machine that runs the TFTP server, that the user (or group) that runs the TFTP server (in this case the Erlang VM) is allowed to read or write. The machine configuration has to be prepared for that.

Warning

The default behavior mentioned above is in general very risky, and as a remedy, this TFTP application's default callback tftp_file implements an initial state option {root_dir,Dir} that restricts the callback's file accesses to Dir and subdirectories. It is recommended to use that option when starting start this TFTP server.