origin
At present, in many schools, there are problems such as outsourcing of educational affairs, poor skills of operation and maintenance personnel, and lack of server resources, so the general educational affairs system is not exposed to the external network. However, the rigid needs of grade inquiry and class timetable inquiry made me have to study how to penetrate the intranet.
analyze
At present , the intranet penetration methods I know are: ssh tunnel, frp, ngrok, peanut shell, but the speed of ssh tunnel is average, the high service price of peanut shell is no longer considered, and there is already vps in hand, so I tend to Alignment selection in frp and ngrok using existing resources.
ngrok（https://github.com/inconshreveable/ngrok）
- ngrok1 is an open source version, there are many known issues (http mode has a memory leak bug), ngrok2 is closed source, and the official does not plan to open source, only open source client
- ngrok needs to compile the program by itself, because ngrok uses certificate verification, and the certificate is directly compiled into the exe file, so you must compile the client and server by yourself
frp（https://github.com/fatedier/frp）
- Fully open source
- There are Chinese documents
- Future plans: frps supports direct reverse proxy, similar to haproxy; frpc supports load balancing to different backend services.
In this comparison, I found that frp completely meets my needs, so I have the following set of solutions:
Now that I have started the Raspberry Pi, I will wait for the arrival of the goods to start tossing, and I will continue to record the implementation process of the whole plan in the future. In addition, the frp one-click script is recommended: http://www.lu8.win/frp.html , the site also has one-click scripts for ngrok and n2n.