FRP 反向代理服务部署完整指南

Sun, 09 Jul 2023 00:00:00 +0000

frp 是什么？

frp 是一款高性能的反向代理应用，专注于内网穿透。它支持多种协议，包括 TCP、UDP、HTTP、HTTPS 等，并且具备 P2P 通信功能。使用 frp，您可以安全、便捷地将内网服务暴露到公网，通过拥有公网 IP 的节点进行中转。

为什么选择 frp？

通过在具有公网 IP 的节点上部署 frp 服务端，您可以轻松地将内网服务穿透到公网，并享受以下专业特性：

多种协议支持：客户端服务端通信支持 TCP、QUIC、KCP 和 Websocket 等多种协议。
TCP 连接流式复用：在单个连接上承载多个请求，减少连接建立时间，降低请求延迟。
代理组间的负载均衡。
端口复用：多个服务可以通过同一个服务端端口暴露。
P2P 通信：流量不必经过服务器中转，充分利用带宽资源。
客户端插件：提供多个原生支持的客户端插件，如静态文件查看、HTTPS/HTTP 协议转换、HTTP、SOCKS5 代理等，以便满足各种需求。
服务端插件系统：高度可扩展的服务端插件系统，便于根据自身需求进行功能扩展。
用户友好的 UI 页面：提供服务端和客户端的用户界面，使配置和监控变得更加方便。

frps

frp 的服务端，需要有公网 IP，开通12345端口。

docker-compose.yaml

  services:
    frps:
      image: fatedier/frps:v0.61.0
      container_name: frps
      restart: always
      working_dir: /etc/frps/
      command: ["-c", "./config.toml"]
      volumes:
        - /etc/localtime:/etc/localtime:ro
        - ./:/etc/frps/
      network_mode: host

config.toml

  bindAddr = "0.0.0.0"
  bindPort = 12345
  
  vhostHTTPPort = 12380
  vhostHTTPSPort = 12343
  
  webServer.addr = "0.0.0.0"
  webServer.port = 12375
  webServer.user = "admin"
  webServer.password = "******"
  
  enablePrometheus = true
  
  log.to = "./logs/frps.log"
  log.level = "debug"
  log.maxDays = 7
  log.disablePrintColor = false
  
  auth.method = "token"
  auth.token = "******"
  
  custom404Page = "./404.html"

404.html

  <!DOCTYPE html>
  <html lang="en">
  <head>
      <meta charset="UTF-8">
      <meta name="viewport" content="width=device-width, initial-scale=1.0">
      <title>Not Found</title>
      <style>
          body {
              font-family: Arial, sans-serif;
              text-align: center;
              margin-top: 100px;
          }
          h1 {
              font-size: 50px;
              margin-bottom: 10px;
          }
          p {
              font-size: 20px;
              margin-top: 0;
          }
      </style>
  </head>
  <body>
  
      <h1>404</h1>
      <p>Page not found</p>
      
  </body>
  </html>

frpc

docker 部署

docker-compose.yaml

  services:
    net-tunnel:
      image: "harbor.example.com/devops/kube-net-tunnel:standalone"
      container_name: "net-tunnel"
      restart: "always"
      network_mode: "bridge"
      working_dir: /etc/net-tunnel/
      volumes:
        - "/etc/localtime:/etc/localtime:ro"
        - "./:/etc/net-tunnel/"
      command: ["-c", "/etc/net-tunnel/config.toml"]

config.toml

  user = "test"
  
  serverAddr = "*.*.*.*"
  serverPort = 12345
  
  auth.method = "token"
  auth.token = "******"
  
  log.to = "./logs/frpc.log"
  log.level = "debug"
  log.maxDays = 3
  log.disablePrintColor = false
  
  webServer.addr = "127.0.0.1"
  webServer.port = 12346
  webServer.user = "admin"
  webServer.password = "******"
  
  [[proxies]]
  name = "admin_ui"
  type = "tcp"
  localIP = "127.0.0.1"
  localPort = 12346
  remotePort = 12440
  
  [[proxies]]
  name = "ssh"
  type = "tcp"
  localIP = "172.17.0.1" # Windows or MacOS: "host.docker.internal"
  localPort = 22
  remotePort = 12441

K8s 部署

kube-net-tunnel.yaml

  apiVersion: v1
  kind: ConfigMap
  metadata:
    name: kube-net-tunnel-config
    namespace: kube-system
  data:
    config.toml: |
      user="test"
      serverAddr = "*.*.*.*"
      serverPort = 12345
  
      auth.method = "token"
      auth.token = "******"
  
      log.to = "console"
      log.level = "debug"
      log.maxDays = 3
      log.disablePrintColor = false
  
      webServer.addr = "127.0.0.1"
      webServer.port = 7400
      webServer.user = "admin"
      webServer.password = "******"
  
      [[proxies]]
      name = "admin"
      type = "tcp"
      localIP = "127.0.0.1"
      localPort = 7400
      remotePort = 12431
  
      [[proxies]]
      name = "ssh"
      type = "tcp"
      localIP = "10.19.31.7"
      localPort = 22
      remotePort = 12432
  
  
  ---
  apiVersion: apps/v1
  kind: Deployment
  metadata:
    name: kube-net-tunnel
    namespace: kube-system
  spec:
    replicas: 1
    selector:
      matchLabels:
        app: kube-net-tunnel
    template:
      metadata:
        labels:
          app: kube-net-tunnel
      spec:
        containers:
          - name: kube-net-tunnel
            image: harbor.example.com/devops/kube-net-tunnel:standalone
            imagePullPolicy: IfNotPresent
            args: ["-c", "/etc/kube-net-tunnel/config.toml"]
            volumeMounts:
              - name: config-volume
                mountPath: /etc/kube-net-tunnel/config.toml
                subPath: config.toml
        volumes:
          - name: config-volume
            configMap:
              defaultMode: 0755
              name: kube-net-tunnel-config
              items:
                - key: config.toml
                  path: config.toml