开源项目:
GitHub - liulilittle/frp: Fast reverse proxy supports UDP/TCP tunnel proxy.
协议支持:SSL流、TLS流、TCP流、加密TCP流、WebSocket 流,等多个类型传输层,可用于海外服务器反代中国大陆家宽设备,故而映射服务到公共网络上。
适配平台:win-x86_32、win-x86_64、linux-s390x、linux-x86_64、linux-aarch64
例程配置:
frp/frp/samples/encryptor at main · liulilittle/frp (github.com)
包含:
frpc.ini 客户端配置
frps.ini 服务器配置
采用跟工具 “SS” 差别不多的加密方法,例如明确支持的加密方法:
chacha20、chacha20-poly1305
aes-128-gcm、aes-192-gcm、aes-256-gcm
aes-128-cfb、aes-192-cfb、aes-256-cfb
sm4、...
具体可自行参考:OpenSSL 1.1.x EVP加密算法组请清单明细。
反向代理配置
frpc.ini 客户端配置:
- [app]
- alignment=4096
- mode=client
- ip=127.0.0.1
- port=7000
- backlog=511
- fast-open=true
- turbo.lan=true
- turbo.wan=true
- connect.timeout=10
- inactive.timeout=72
- protocol=encryptor
- protocol.encryptor.method=aes-128-gcm
- protocol.encryptor.password=frp
-
- [http]
- type=tcp
- local-ip=185.207.153.31
- local-port=80
- remote-port=80
-
- [ssh]
- type=tcp
- local-ip=192.168.0.24
- local-port=22
- remote-port=10022
-
- [dns]
- type=udp
- local-ip=192.168.0.24
- local-port=53
- remote-port=10053
frps.ini 服务器配置:
- [app]
- alignment=4096
- mode=server
- ip=::
- port=7000
- backlog=511
- fast-open=true
- turbo.lan=true
- turbo.wan=true
- connect.timeout=10
- inactive.timeout=72
- handshake.timeout=5
- protocol=encryptor
- protocol.encryptor.method=aes-128-gcm
- protocol.encryptor.password=frp