配置frp

部署frp

1. 创建frp客户端

   暴露主机配置文件内容frpc_home.ini

   [common]
   server_addr = 107.150.34.118
   server_port = 9876
   
   #暴露主机名称
   [redmi_ssh]
   type = xtcp
   # 只有 sk 一致的用户才能访问到此服务
   sk = abcdefg
   local_ip = 127.0.0.1
   local_port = 22
   
   # KCP 暴露主机名称
   [redmi_ssh]
   type = xtcp
   # 只有 sk 一致的用户才能访问到此服务
   sk = abcdefg
   local_ip = 127.0.0.1
   local_port = 22
   protocl = kcp
   
   

   访问主机配置 frpc_home.ini

   [common]
   server_addr = 107.150.34.118
   server_port = 9876
   
   #访问主机名
   [redmi_ssh_visitor]
   type = xtcp
   # xtcp 的访问者
   role = visitor
   # 要访问的 xtcp 代理的名字
   server_name = redmi_ssh
   sk = abcdefg
   # 绑定本地端口用于访问 ssh 服务
   bind_addr = 127.0.0.1
   bind_port = 6000
   

   配置启动模板

   echo "[Unit]
   Description=Frp Client Service
   After=network.target
   
   [Service]
   Type=simple
   Restart=on-failure
   RestartSec=5s
   ExecStart=/usr/bin/frpc -c /etc/frp/%i.ini
   ExecReload=/usr/bin/frpc reload -c /etc/frp/%i.ini
   
   [Install]
   WantedBy=multi-user.target
   " > systemd/frpc@.service
   

   配置开机启动，首先需要有frpc_home.ini配置文件

   sudo mkdir /etc/frp
   sudo cp frpc.ini /etc/frp/
   sudo cp frpc /usr/bin/
   sudo cp systemd/frpc@.service /lib/systemd/system/frpc@.service
   sudo systemctl daemon-reload
   sudo systemctl enable --now frpc@frpc_home
   sudo systemctl start frpc@frpc_home.service
   

2. 配置服务端frps.ini文件

   #普通配置
   [common]
   bind_port = 9876
   bind_udp_port = 9876
   
   # KCP 配置
   [common]
   bind_port = 9876
   kcp_bind_port = 9876
   
   

   配置服务器端开机启动

   sudo cp frps /usr/bin/
   sudo mkdir /etc/frp
   sudo cp frps.ini /etc/frp/
   sudo cp systemd/frps.service /lib/systemd/system/
   sudo systemctl daemon-reload
   sudo systemctl enable frps.service
   

3. 开启服务器端口

   sudo firewall-cmd --zone=public --add-port=9876/tcp --permanent
   sudo firewall-cmd --zone=public --add-port=9876/udp --permanent
   sudo firewall-cmd --reload
   

4. 配置MacOS启动

   brew install frpc
   brew services run frpc
   

5. 配置https点对点

   服务器端配置

   [common]
   bind_port = 9876
   vhost_http_port = 80
   vhost_https_port = 443
   

   客户端配置

   [common]
   server_addr = test.name.cn
   server_port = 9876
   
   [web_http]
   type = http
   local_port = 80
   custom_domains = test.name.cn
   
   [web_https]
   type = https
   custom_domains = test.name.cn
   plugin = https2https
   plugin_local_addr = 127.0.0.1:443
   plugin_crt_path = /home/shuyi/gitlab/config/ssl/gitlab.wangshuyi.cn.cer
   plugin_key_path = /home/shuyi/gitlab/config/ssl/gitlab.wangshuyi.cn.key
   #plugin_host_header_rewrite = 127.0.0.1
   #plugin_header_X-From-Where = frp