[关闭]
@GEEKO 2018-12-19T06:01:30.000000Z 字数 9499 阅读 1231

FRP搭建内网穿透

frp

简介

frp是啥

frp 是一个可用于内网穿透的高性能的反向代理应用，支持 tcp, udp, http, https 协议。
此处输入图片的描述

frp 的作用

利用处于内网或防火墙后的机器，对外网环境提供 http 或 https 服务。
对于 http, https 服务支持基于域名的虚拟主机，支持自定义域名绑定，使多个域名可以共用一个80端口。
利用处于内网或防火墙后的机器，对外网环境提供 tcp 和 udp 服务，例如在家里通过 ssh 访问处于公司内网环境内的主机。

免费FRP服务器

服务器是0.20.0版本，请使用相同版本客户端，支持UDP打洞直连穿透,免费服务器仅供测试，安全问题自己掂量
如果有需要内网穿透的，可以联系我，我自己服务器有搭建对应的FRP服务端
连接地址为：frpzj.kskxs.com:7000
特权认证密码为：frp888
免费多级域名格式 *.frpzj.kskxs.com 支持8081端口的域名绑定映射方式
将域名CNAME解析至 frpzj.kskxs.com 即可绑定自己的域名
此服务器开放50000-60000范围的TCP、UDP端口映射
隧道状态查询：frpzj.kskxs.com:7500
查询帐号和密码均为：admin

FRP相关站点资料

GITHUB: https://github.com/fatedie
官网： https://diannaobos.com/frp

本次安装环境

安装环境：
服务器：阿里云 centos 7
客户端：ubuntu 16

安装配置

服务端安装

  1. # 手动配置frps.ini文件需要注意 = 前后都有空格,如果没有空格，则会配置不生效
  3. [common]
  4. bind_port=7000 # 客户端连接服务端的对外端口
  5. dashboard_port = 7500 # 服务端管理页面对外端口
  6. token = 123456 # 这里是客户端连接授权的凭证 
  8. # dashboard 用户名密码，默认都为 admin
  9. dashboard_user = admin # 服务端管理页面登录账号
  10. dashboard_pwd = admin  # 服务端管理页面登录密码
  12. vhost_http_port = 80    # http 开放80端口
  13. vhost_https_port = 443  # https 开放443端口
  15. # frps 服务端日志配置
  16. log_file=/home/jesn/tool/frp/logs/frps.log
  17. log_level=info
  18. log_max_day=7

客户端配置

  1. [common]
  2. server_addr = 100.100.100.100 # 服务器公网IP
  3. server_port = 7001  # FRPS对外接口端口
  4. token = 123456 # 服务器token凭证
  5. log_file = frpc.log
  6. log_level = info
  7. log_max_days = 3
  9. # ssh 配置
  10. [ssh]
  11. type = tcp
  12. local_ip = 127.0.0.1
  13. local_port = 22
  14. remote_port = 7022

Web配置HTTP

  1. vhost_http_port = 80    # http 开放80端口
  2. vhost_https_port = 443  # https 开放443端口
  1. [web]
  2. type = http # 类型为http
  3. local_port = 80 # 本地端口
  4. custom_domains = www.yourdomain.com # 你的域名

完整的frps和frpc的配置

frps 完整配置

  1. # [common] is integral section
  2. [common]
  3. # A literal address or host name for IPv6 must be enclosed
  4. # in square brackets, as in "[::1]:80", "[ipv6-host]:http" or "[ipv6-host%zone]:80"
  5. bind_addr = 0.0.0.0
  6. bind_port = 7000
  8. # udp port to help make udp hole to penetrate nat
  9. bind_udp_port = 7001
  11. # udp port used for kcp protocol, it can be same with 'bind_port'
  12. # if not set, kcp is disabled in frps
  13. kcp_bind_port = 7000
  15. # specify which address proxy will listen for, default value is same with bind_addr
  16. # proxy_bind_addr = 127.0.0.1
  18. # if you want to support virtual host, you must set the http port for listening (optional)
  19. # Note: http port and https port can be same with bind_port
  20. vhost_http_port = 80
  21. vhost_https_port = 443
  23. # response header timeout(seconds) for vhost http server, default is 60s
  24. # vhost_http_timeout = 60
  26. # set dashboard_addr and dashboard_port to view dashboard of frps
  27. # dashboard_addr's default value is same with bind_addr
  28. # dashboard is available only if dashboard_port is set
  29. dashboard_addr = 0.0.0.0
  30. dashboard_port = 7500
  32. # dashboard user and passwd for basic auth protect, if not set, both default value is admin
  33. dashboard_user = admin
  34. dashboard_pwd = admin
  36. # dashboard assets directory(only for debug mode)
  37. # assets_dir = ./static
  38. # console or real logFile path like ./frps.log
  39. log_file = ./frps.log
  41. # trace, debug, info, warn, error
  42. log_level = info
  44. log_max_days = 3
  46. # auth token
  47. token = 12345678
  49. # heartbeat configure, it's not recommended to modify the default value
  50. # the default value of heartbeat_timeout is 90
  51. # heartbeat_timeout = 90
  53. # only allow frpc to bind ports you list, if you set nothing, there won't be any limit
  54. allow_ports = 2000-3000,3001,3003,4000-50000
  56. # pool_count in each proxy will change to max_pool_count if they exceed the maximum value
  57. max_pool_count = 5
  59. # max ports can be used for each client, default value is 0 means no limit
  60. max_ports_per_client = 0
  62. # authentication_timeout means the timeout interval (seconds) when the frpc connects frps
  63. # if authentication_timeout is zero, the time is not verified, default is 900s
  64. authentication_timeout = 900
  66. # if subdomain_host is not empty, you can set subdomain when type is http or https in frpc's configure file
  67. # when subdomain is test, the host used by routing is test.frps.com
  68. subdomain_host = frps.com
  70. # if tcp stream multiplexing is used, default is true
  71. tcp_mux = true

frpc完整配置

  1. # [common] is integral section
  2. [common]
  3. # A literal address or host name for IPv6 must be enclosed
  4. # in square brackets, as in "[::1]:80", "[ipv6-host]:http" or "[ipv6-host%zone]:80"
  5. server_addr = 0.0.0.0
  6. server_port = 7000
  8. # if you want to connect frps by http proxy or socks5 proxy, you can set http_proxy here or in global environment variables
  9. # it only works when protocol is tcp
  10. # http_proxy = http://user:passwd@192.168.1.128:8080
  11. # http_proxy = socks5://user:passwd@192.168.1.128:1080
  13. # console or real logFile path like ./frpc.log
  14. log_file = ./frpc.log
  16. # trace, debug, info, warn, error
  17. log_level = info
  19. log_max_days = 3
  21. # for authentication
  22. token = 12345678
  24. # set admin address for control frpc's action by http api such as reload
  25. admin_addr = 127.0.0.1
  26. admin_port = 7400
  27. admin_user = admin
  28. admin_pwd = admin
  30. # connections will be established in advance, default value is zero
  31. pool_count = 5
  33. # if tcp stream multiplexing is used, default is true, it must be same with frps
  34. tcp_mux = true
  36. # your proxy name will be changed to {user}.{proxy}
  37. user = your_name
  39. # decide if exit program when first login failed, otherwise continuous relogin to frps
  40. # default is true
  41. login_fail_exit = true
  43. # communication protocol used to connect to server
  44. # now it supports tcp and kcp and websocket, default is tcp
  45. protocol = tcp
  47. # specify a dns server, so frpc will use this instead of default one
  48. # dns_server = 8.8.8.8
  50. # proxy names you want to start divided by ','
  51. # default is empty, means all proxies
  52. # start = ssh,dns
  54. # heartbeat configure, it's not recommended to modify the default value
  55. # the default value of heartbeat_interval is 10 and heartbeat_timeout is 90
  56. # heartbeat_interval = 30
  57. # heartbeat_timeout = 90
  59. # 'ssh' is the unique proxy name
  60. # if user in [common] section is not empty, it will be changed to {user}.{proxy} such as 'your_name.ssh'
  61. [ssh]
  62. # tcp | udp | http | https | stcp | xtcp, default is tcp
  63. type = tcp
  64. local_ip = 127.0.0.1
  65. local_port = 22
  66. # true or false, if true, messages between frps and frpc will be encrypted, default is false
  67. use_encryption = false
  68. # if true, message will be compressed
  69. use_compression = false
  70. # remote port listen by frps
  71. remote_port = 6001
  72. # frps will load balancing connections for proxies in same group
  73. group = test_group
  74. # group should have same group key
  75. group_key = 123456
  76. # enable health check for the backend service, it support 'tcp' and 'http' now
  77. # frpc will connect local service's port to detect it's healthy status
  78. health_check_type = tcp
  79. health_check_interval_s = 10
  80. health_check_max_failed = 1
  81. health_check_timeout_s = 3
  83. [ssh_random]
  84. type = tcp
  85. local_ip = 127.0.0.1
  86. local_port = 22
  87. # if remote_port is 0, frps will assign a random port for you
  88. remote_port = 0
  90. # if you want to expose multiple ports, add 'range:' prefix to the section name
  91. # frpc will generate multiple proxies such as 'tcp_port_6010', 'tcp_port_6011' and so on.
  92. [range:tcp_port]
  93. type = tcp
  94. local_ip = 127.0.0.1
  95. local_port = 6010-6020,6022,6024-6028
  96. remote_port = 6010-6020,6022,6024-6028
  97. use_encryption = false
  98. use_compression = false
  100. [dns]
  101. type = udp
  102. local_ip = 114.114.114.114
  103. local_port = 53
  104. remote_port = 6002
  105. use_encryption = false
  106. use_compression = false
  108. [range:udp_port]
  109. type = udp
  110. local_ip = 127.0.0.1
  111. local_port = 6010-6020
  112. remote_port = 6010-6020
  113. use_encryption = false
  114. use_compression = false
  116. # Resolve your domain names to [server_addr] so you can use http://web01.yourdomain.com to browse web01 and http://web02.yourdomain.com to browse web02
  117. [web01]
  118. type = http
  119. local_ip = 127.0.0.1
  120. local_port = 80
  121. use_encryption = false
  122. use_compression = true
  123. # http username and password are safety certification for http protocol
  124. # if not set, you can access this custom_domains without certification
  125. http_user = admin
  126. http_pwd = admin
  127. # if domain for frps is frps.com, then you can access [web01] proxy by URL http://test.frps.com
  128. subdomain = web01
  129. custom_domains = web02.yourdomain.com
  130. # locations is only available for http type
  131. locations = /,/pic
  132. host_header_rewrite = example.com
  133. # params with prefix "header_" will be used to update http request headers
  134. header_X-From-Where = frp
  135. health_check_type = http
  136. # frpc will send a GET http request '/status' to local http service
  137. # http service is alive when it return 2xx http response code
  138. health_check_url = /status
  139. health_check_interval_s = 10
  141. [web02]
  142. type = https
  143. local_ip = 127.0.0.1
  144. local_port = 8000
  145. use_encryption = false
  146. use_compression = false
  147. subdomain = web01
  148. custom_domains = web02.yourdomain.com
  150. [plugin_unix_domain_socket]
  151. type = tcp
  152. remote_port = 6003
  153. # if plugin is defined, local_ip and local_port is useless
  154. # plugin will handle connections got from frps
  155. plugin = unix_domain_socket
  156. # params with prefix "plugin_" that plugin needed
  157. plugin_unix_path = /var/run/docker.sock
  159. [plugin_http_proxy]
  160. type = tcp
  161. remote_port = 6004
  162. plugin = http_proxy
  163. plugin_http_user = abc
  164. plugin_http_passwd = abc
  166. [plugin_socks5]
  167. type = tcp
  168. remote_port = 6005
  169. plugin = socks5
  170. plugin_user = abc
  171. plugin_passwd = abc
  173. [plugin_static_file]
  174. type = tcp
  175. remote_port = 6006
  176. plugin = static_file
  177. plugin_local_path = /var/www/blog
  178. plugin_strip_prefix = static
  179. plugin_http_user = abc
  180. plugin_http_passwd = abc
  182. [secret_tcp]
  183. # If the type is secret tcp, remote_port is useless
  184. # Who want to connect local port should deploy another frpc with stcp proxy and role is visitor
  185. type = stcp
  186. # sk used for authentication for visitors
  187. sk = abcdefg
  188. local_ip = 127.0.0.1
  189. local_port = 22
  190. use_encryption = false
  191. use_compression = false
  193. # user of frpc should be same in both stcp server and stcp visitor
  194. [secret_tcp_visitor]
  195. # frpc role visitor -> frps -> frpc role server
  196. role = visitor
  197. type = stcp
  198. # the server name you want to visitor
  199. server_name = secret_tcp
  200. sk = abcdefg
  201. # connect this address to visitor stcp server
  202. bind_addr = 127.0.0.1
  203. bind_port = 9000
  204. use_encryption = false
  205. use_compression = false
  207. [p2p_tcp]
  208. type = xtcp
  209. sk = abcdefg
  210. local_ip = 127.0.0.1
  211. local_port = 22
  212. use_encryption = false
  213. use_compression = false
  215. [p2p_tcp_visitor]
  216. role = visitor
  217. type = xtcp
  218. server_name = p2p_tcp
  219. sk = abcdefg
  220. bind_addr = 127.0.0.1
  221. bind_port = 9001
  222. use_encryption = false
  223. use_compression = false

问题vS解决方案

添加新批注
在作者公开此批注前，只有你和作者可见。
回复批注