Within grasp network penetration, home phone can also become obsolete server

One day, the small Rui suddenly found the students access to the school library system actually only connected to the campus network to access (referred to as: network access). Small Rui usually a good move, and thus decided to use the technology they learned to do based on a "Campus Book review" Micro-letter applet system.

But our school "campus book search" certainly intranet server system, how can I let the outside world can access it? This Caishuxueqian small Rui students is really a difficult problem. Fortunately, the small Rui Wang seniors get advice - within the network penetration .

What is inside the network through it?

Among the two computers are in different LANs, computer nodes within the network and external network connection communication needs, then we need the help of network penetration technology to solve this problem, also known as NAT traversal . In simple terms, it is to allow external network can visit your local application.

To be able to off-campus and not connected to the campus network, you can also use the "book search system", I decided to use " FRP " to achieve this goal.

frp is an application for advanced reverse proxy internal network penetration , support tcp, udp protocol, provides additional capabilities for http and https application protocol, and try to support the penetration point.

Below is my adopted schematic drawing of a frp achieve within the network penetration, in order to facilitate the distinction between frp client and server , and workflow.

我们先在ESC服务器上配置frp的服务端，然后找一台可访问局域网的设备，搭建web服务器，并且配置frp客服端。以达到实现广域网任意pc访问8080端口，frp服务端就可以把通过8081端口，将请求转发给局域网内的给8082端口，8082端口再将响应通过8081、8080端口返回给PC机。其实就是一个请求转发的过程。

配置frp服务端

1、我们先用SSH连接ECS服务器，根据自己操作系统及架构，从 Release 页面（点击阅读原文）下载最新版本的程序。可以通过wget下载，也可以在自己的电脑上下载好后，通过FTP工具上传。

wget --no-check-certificate https://github.com/fatedier/frp/releases/download/v0.31.2/frp_0.31.2_linux_amd64.tar.gz

2、使用tar命令进行解压

 tar -zxvf 解压下载的压缩包

3、修改服务端的配置文件

 vim frps.ini   [common] #frp服务端与客户端连接端口，frps和frpc必须一致 bind_port = 8081 #服务端外部提供的端口 vhost_http_port = 8080 # 仪表盘端口，只有设置了才能使用仪表盘（即后台） dashboard_port = 7500 # 仪表盘访问的用户名密码，如果不设置，则默认都是 admin dashboard_user = admin dashboard_pwd = admin

然后键入ESC+wq+Enter，保存退出。

4、启动服务端

./frps -c frps.ini

这里有一个坑，我们断开SSH连接后，frp的服务端也就停止了。我们可以使用nohup，这样就可以保持frp的服务端可以保持正常运行。

nohup ./frps -c frps.ini &

配置frp客户端

1、首页搭建web服务器，我使用的是Nginx，这都大同小异。只要记得自己的Nginx端口就没问题。

2、执行以下命令，下载以及下载frp。

wget --no-check-certificate https://github.com/fatedier/frp/releases/download/v0.31.2/frp_0.31.2_linux_amd64.tar.gztar -zxvf 解压下载的压缩包

3、修改客户端配置文件

vim frpc.ini 

[common]#服务端公网ip地址server_addr = x.x.x.x#与服务端通信端口server_port = 8081 [web]type = http#本地Nginx服务端口local_port = 8082#公网ip绑定的域名custom_domains = xxx.xxx.com

然后键入ESC+wq+Enter，保存退出。

4、启动客户端