你是否也遇到过需要远程访问服务器上的服务,但又担心安全问题?frp(Fast Remote Procedure Call)可以帮你解决这个问题。今天,我们就来聊聊如何配置frp,让你轻松搭建安全稳定的隧道。
一、安装frp
首先,我们需要下载并安装frp。以下是在Linux系统中安装frp的步骤:
wget https://github.com/fatedier/frp/releases/download/v0.37.1/frp_0.37.1_linux_amd64.tar.gz -O frp.tar.gz
tar -zxvf frp.tar.gz
mv frp /usr/local
二、配置server端
接下来,我们需要配置server端。以下是server端的配置文件内容:
[common]
bind_port = 7000
dashboard_port = 10001
token = xxxxxx
dashboard_user = admin
dashboard_pwd = xxxxxx
vhost_http_port = 10002
vhost_https_port = 10003
subdomain_host = etone.xxxxx.top
配置完成后,我们需要将frps.service文件移动到systemd的系统服务目录,并启动frps服务:
mv /usr/local/frp/systemd/frps.service /usr/lib/systemd/system
systemctl daemon-reload
systemctl enable frps
systemctl start frps
三、配置nginx
为了方便访问,我们需要配置nginx。以下是nginx的配置文件内容:
server {
listen 80;
listen 443 ssl http2;
server_name *.etone.xxxxx.top etone.xxxxx.top;
ssl_certificate /www/server/panel/vhost/cert/etone.pem;
ssl_certificate_key /www/server/panel/vhost/cert/etone.key;
ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;
ssl_ciphers EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;
add_header Strict-Transport-Security
