Linux使用FRP

1. 作者QQ：67065435 QQ群：669756510

2. 本站内容全部为作者原创，转载请注明出处！

注意事项

1. 将内网服务器放于公网，需注意弱口令漏洞防范

下载安装frp(服务器端)

1. 获取服务器内核

   arch
   

2. 根据内核下载frp

   wget --no-check-certificate -c https://github.com/fatedier/frp/releases/download/v0.54.0/frp_0.54.0_linux_amd64.tar.gz
   

3. 解压frp

   tar -xf frp_0.54.0_linux_amd64.tar.gz
   mv frp_0.54.0_linux_amd64 /usr/local/frp
   

4. 配置frps

   vim /usr/local/frp/frps.toml
   
   # 公共配置
   bindPort = 7000
   #HTTP(S)协议需要设置↓
   #vhostHTTPPort = 80
   #vhostHTTPSPort = 443
   auth.method = "token"
   auth.token = "QUNIMADASHABI"
   
   # 管理面板(缺省)
   webServer.port = 7001
   webServer.addr = "0.0.0.0"
   webServer.user = "admin"
   webServer.password = "Aa12345"
   
   ESC
   :wq
   

5. 管理frps

   vim /etc/systemd/system/frps.service
   
   [Unit]
   Description=FRPS
   After=default.target network.target
   
   [Service]
   User=root
   Group=root
   Type=simple
   ExecStart=/usr/local/frp/frps -c /usr/local/frp/frps.toml
   PrivateTmp=true
   Restart=always
   RestartSec=5
   StartLimitInterval=0
   
   [Install]
   WantedBy=multi-user.target
   
   ESC
   :wq
   
   systemctl daemon-reload
   systemctl enable frps
   systemctl start frps
   

6. 配置防火墙(仅限服务端配置)

   systemctl unmask firewalld
   systemctl enable firewalld
   systemctl start firewalld
   firewall-cmd --permanent --zone=public --add-port='80/tcp'
   firewall-cmd --permanent --zone=public --add-port='443/tcp'
   firewall-cmd --permanent --zone=public --add-port='7000/tcp'
   firewall-cmd --permanent --zone=public --add-port='7001/tcp'
   firewall-cmd --permanent --zone=public --add-port='2001/tcp'
   firewall-cmd --permanent --zone=public --add-port='2002/tcp'
   firewall-cmd --reload
   

下载安装frp(客户端)

1. 获取客户端内核

   arch
   

2. 根据内核下载frp

   wget --no-check-certificate -c https://github.com/fatedier/frp/releases/download/v0.54.0/frp_0.54.0_linux_amd64.tar.gz
   

3. 解压frp

   tar -xf frp_0.54.0_linux_amd64.tar.gz
   mv frp_0.54.0_linux_amd64 /usr/local/frp
   

4. 配置frpc(客户端1)

   vim /usr/local/frp/frpc.toml
   
   serverAddr = "服务端IP"
   serverPort = 7000
   auth.method = "token"
   auth.token = "QUNIMADASHABI"
   
   [[proxies]]
   name = "ssh1"
   type = "tcp"
   localIP = "127.0.0.1"
   localPort = 22
   remotePort = 2001
   
   [[proxies]]
   name = "http1"
   #type = "http"
   type = "tcp"
   localIP = "127.0.0.1"
   localPort = 80
   #TCP协议需要设置↓
   remotePort = 80
   customDomains = ["服务端IP或映射域名"]
   
   [[proxies]]
   name = "https1"
   #type = "https"
   type = "tcp"
   localIP = "127.0.0.1"
   localPort = 443
   #TCP协议需要设置↓
   remotePort = 443
   customDomains = ["服务端IP或映射域名"]
   
   ESC
   :wq
   

5. 配置frpc(客户端2)

   vim /usr/local/frp/frpc.toml
   
   serverAddr = "服务端IP"
   serverPort = 7000
   auth.method = "token"
   auth.token = "QUNIMADASHABI"
   
   [[proxies]]
   name = "ssh2"
   type = "tcp"
   localIP = "127.0.0.1"
   localPort = 22
   remotePort = 2002
   
   [[proxies]]
   name = "http2"
   type = "http"
   localIP = "127.0.0.1"
   localPort = 80
   customDomains = ["服务端IP或映射域名"]
   
   [[proxies]]
   name = "https2"
   type = "https"
   localIP = "127.0.0.1"
   localPort = 443
   customDomains = ["服务端IP或映射域名"]
   
   ESC
   :wq
   

6. 管理frpc

   vim /etc/systemd/system/frpc.service
   
   [Unit]
   Description=FRPC
   After=default.target network.target
   
   [Service]
   User=root
   Group=root
   Type=simple
   ExecStart=/usr/local/frp/frpc -c /usr/local/frp/frpc.toml
   PrivateTmp=true
   Restart=always
   RestartSec=5
   StartLimitInterval=0
   
   [Install]
   WantedBy=multi-user.target
   
   ESC
   :wq
   
   systemctl daemon-reload
   systemctl enable frpc
   systemctl start frpc
   

注意事项

1. 客户端启动后要重启服务端