frp 反向隧道代理(内网穿透)之协议 “tcp + encryptor”

开源项目: GitHub - liulilittle/frp: Fast reverse proxy supports UDP/TCP tunnel prox

开源项目:

GitHub - liulilittle/frp: Fast reverse proxy supports UDP/TCP tunnel proxy.

协议支持:SSL流、TLS流、TCP流、加密TCP流、WebSocket 流,等多个类型传输层,可用于海外服务器反代中国大陆家宽设备,故而映射服务到公共网络上。

适配平台:win-x86_32、win-x86_64、linux-s390x、linux-x86_64、linux-aarch64

例程配置:

frp/frp/samples/encryptor at main · liulilittle/frp (github.com)

包含: 

frpc.ini 客户端配置

frps.ini 服务器配置

采用跟工具 “SS” 差别不多的加密方法,例如明确支持的加密方法:

chacha20、chacha20-poly1305

aes-128-gcm、aes-192-gcm、aes-256-gcm

aes-128-cfb、aes-192-cfb、aes-256-cfb

sm4、...

具体可自行参考:OpenSSL 1.1.x EVP加密算法组请清单明细。

反向代理配置 

frpc.ini 客户端配置:

[app]
alignment=4096
mode=client
ip=127.0.0.1
port=7000
backlog=511
fast-open=true
turbo.lan=true
turbo.wan=true
connect.timeout=10
inactive.timeout=72
protocol=encryptor
protocol.encryptor.method=aes-128-gcm
protocol.encryptor.password=frp[http]
type=tcp
local-ip=185.207.153.31
local-port=80
remote-port=80[ssh]
type=tcp
local-ip=192.168.0.24
local-port=22
remote-port=10022[dns]
type=udp
local-ip=192.168.0.24
local-port=53
remote-port=10053

frps.ini 服务器配置:

[app]
alignment=4096
mode=server
ip=::
port=7000
backlog=511
fast-open=true
turbo.lan=true
turbo.wan=true
connect.timeout=10
inactive.timeout=72
handshake.timeout=5
protocol=encryptor
protocol.encryptor.method=aes-128-gcm
protocol.encryptor.password=frp