系统环境

centos7

服务端安装frps

下载frps程序包

wget https://github.com/fatedier/frp/releases/download/v0.47.0/frp_0.47.0_linux_amd64.tar.gz
## github地址下载:https://github.com/fatedier/frp/releases
## 网盘下载: https://bash.lanzoul.com/iG24d0n67qib 密码:bu7s
tar xf frp_0.47.0_linux_amd64.tar.gz
mv frp_0.47.0_linux_amd64 /usr/local/frps

配置frps

cat > /usr/local/frps/frps.ini <<EOF
[common]
#服务端监听端口
bind_port = 7000
#http代理端口
vhost_http_port = 8000
##安全token，随便下个长的，与客户端一致
token=996655sdfdasdfdasfas
EOF

启动frps

cat  > /lib/systemd/system/frps.service <<EOF
[Unit]
Description=frps service
After=network.target syslog.target
Wants=network.target
[Service]
Type=simple
#服务启动命令
ExecStart=/usr/local/frps/frps  -c /usr/local/frps/frps.ini 
[Install]
WantedBy=multi-user.target
EOF
systemctl daemon-reload
systemctl  start frps
systemctl  enable frps
systemctl  status frps

客户端安装frpc

下载frpc程序包

wget https://github.com/fatedier/frp/releases/download/v0.47.0/frp_0.47.0_linux_amd64.tar.gz
## github地址下载:https://github.com/fatedier/frp/releases
## 网盘下载: https://bash.lanzoul.com/iG24d0n67qib 密码:bu7s
tar xf frp_0.47.0_linux_amd64.tar.gz
mv frp_0.47.0_linux_amd64 /usr/local/frpc

配置frpc

cat > /usr/local/frpc/frpc.ini <<EOF
[common]
#服务端的ip
server_addr = 192.168.0.11
#服务端的监听端口
server_port = 7000
#安全token，与服务端的一致
token=996655sdfdasdfdasfas
#配置ssh连接
[ssh]
type = tcp
local_ip = 127.0.0.1
#转发到本地ssh端口
local_port = 22
#开启远程服务端端口，服务端可以通过该端口进行ssh访问
remote_port = 7008
[http]
type = http
#转发到本地http端口
local_port = 8888
#访问域名
custom_domains =  frp.6666.top
EOF

启动frpc

cat  > /lib/systemd/system/frpc.service <<EOF
[Unit]
Description=frpc service
After=network.target syslog.target
Wants=network.target
[Service]
Type=simple
#启动服务的命令
ExecStart=/usr/local/frpc/frpc  -c /usr/local/frpc/frpc.ini 
[Install]
WantedBy=multi-user.target
EOF
systemctl daemon-reload
systemctl  start frpc
systemctl  enable frpc
systemctl  status frpc

服务端配置nginx实现http/https转发

nginx配置

server {  
    listen 80;
    server_name frp.6666.top;   #自己的网站域名
    #强制SSL
    rewrite ^(.*)$  https://$host$1 permanent;
}
server {
    listen 443 ssl;
    server_name frp.6666.top;   #自己的网站域名
    #对应自己域名证书文件
    ssl_certificate ../cert/frp.6666.top.cer;
    ssl_certificate_key ../cert/frp.6666.top.key;
    # ssl验证相关配置
    ssl_session_timeout  5m;    #缓存有效期
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;    #加密算法
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;    #安全链接可选的加密协议
    ssl_prefer_server_ciphers on;   #使用服务器端的首选算法
    location / {
                proxy_pass  http://127.0.0.1:8000;     #frp设置的vhost_http_port端口
                # 传递真实IP和http/https标识
                proxy_set_header Host $host;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header X-Forwarded-Proto $scheme;
        }
    }