2023-07-09-【记录】安装nps-frp服务端与客户端.md 6.8 KB
title: 【记录】安装nps/frp服务端与客户端 urlname: -ji-lu--an-zhuang-npsfrp-fu-wu-duan-yu-ke-hu-duan date: 2023-07-09 19:59:34
tags: 内网穿透
安装nps
服务端
- 安装 Nginx Proxy Manager
项目地址 yisier/nps
mkdir -p ~/base/NPS && cd ~/base/NPS && mkdir conf nano docker-compose.yml nano conf/nps.conf touch conf/{clients,hosts,tasks}.json sudo docker-compose up -d # 反代 dashboard 8080version: '3.3' services: nps: container_name: nps restart: unless-stopped network_mode: host volumes: - './conf:/conf' - '/etc/localtime:/etc/localtime:ro' image: yisier1/nps networks: default: external: true name: ngpmappname = nps #Boot mode(dev|pro) runmode = pro #HTTP(S) proxy port, no startup if empty http_proxy_ip=0.0.0.0 http_proxy_port=18081 ##bridge bridge_type=tcp bridge_port=8024 bridge_ip=0.0.0.0 #Traffic data persistence interval(minute) #Ignorance means no persistence #flow_store_interval=1 # log level LevelEmergency->0 LevelAlert->1 LevelCritical->2 LevelError->3 LevelWarning->4 LevelNotice->5 LevelInformational->6 LevelDebug->7 log_level=7 #log_path=nps.log #Whether to restrict IP access, true or false or ignore #ip_limit=true #allow_ports=9001-9009,10001,11000-12000 #Web management multi-user login allow_user_login=false allow_user_register=false allow_user_change_username=false #extension allow_flow_limit=false allow_rate_limit=false allow_tunnel_num_limit=false allow_local_proxy=false allow_connection_num_limit=false allow_multi_ip=false system_info_display=true #cache http_cache=false http_cache_length=100 #get origin ip http_add_origin_header=false #pprof debug options #pprof_ip=0.0.0.0 #pprof_port=9999 #client disconnect timeout disconnect_timeout=60 # 以下的需要进行配置 # Public password, which clients can use to connect to the server # After the connection, the server will be able to open relevant ports and parse related domain names according to its own configuration file. public_vkey=<16个字符> #Web API unauthenticated IP address(the len of auth_crypt_key must be 16) #Remove comments if needed auth_key=<24个字符> auth_crypt_key=<16个字符> #web web_host=limour.top web_username=Limour web_password=<16个字符> web_port = 8080 web_ip=0.0.0.0 web_open_ssl=false web_base_url= open_captcha=true # if web under proxy use sub path. like http://host/nps need this. #web_base_url=/nps #p2p p2p_ip=<写服务器的ip> p2p_port=6000 # 设置为6000，请在控制台防火墙开放6000~6002(额外添加2个端口)udp端口
客户端
# nps web管理-客户端，新建一个客户端，记录下唯一验证密钥
mkdir -p ~/base/NPC && cd ~/base/NPC
nano docker-compose.yml
sudo docker-compose up -d
sudo docker-compose logs
version: '3.3'
services:
npc:
container_name: npc
network_mode: host
image: yisier1/npc
restart: unless-stopped
command: -server=nps.blog.com:8024 -vkey=<web界面中显示的密钥>
临时客户端
#!/usr/bin/bash
~/bin/npc -server=nps.blog.com:8024 -vkey=*** -type=tcp > ~/log/npc.log 2>&1 &
source activate jupyter
jupyter lab \
--ip='0.0.0.0' \
--no-browser \
--ServerApp.token="****" \
--port=19878 \
--NotebookNotary.db_file=':memory:'
nano j.sh
chmod +x j.sh
nohup ./j.sh > ~/log/j.log 2>&1 &
安装 frp
服务端
mkdir -p ~/base/FRP && cd ~/base/FRP
nano docker-compose.yml
nano frps.ini
sudo docker-compose up -d
tail frps_log/frps.log
# 反代 dashboard 11750
version: '3.3'
services:
frps:
restart: always
network_mode: host
volumes:
- './frps.ini:/etc/frp/frps.ini'
- './frps_log:/tmp/frps_log'
container_name: frps
image: snowdreamtech/frps
networks:
default:
external: true
name: ngpm
[common]
tls_only = true
authentication_method = token
token = <token>
bind_port = 21000
bind_udp_port = 20999
kcp_bind_port = 21000
dashboard_port = 11750
dashboard_user = Limour
dashboard_pwd = <passwd>
allow_ports = 21001-21999
subdomain_host = limour.top
vhost_http_port = 21080
vhost_https_port = 21443
log_file = /tmp/frps_log/frps.log
log_level = info
log_max_days = 3
客户端
mkdir -p ~/base/FRP && cd ~/base/FRP
nano docker-compose.yml
nano frpc.ini
sudo docker-compose up -d
version: '3.3'
services:
frpc:
restart: always
network_mode: host
volumes:
- './frpc.ini:/etc/frp/frpc.ini'
image: snowdreamtech/frpc
[common]
server_addr = frp.limour.top
server_port = 21000
tls_enable = true
token = <token>
user = rasp4
[ssh]
type = tcp
local_ip = 127.0.0.1
local_port = 22
remote_port = 21122
[AAA]
type = http
local_ip = 127.0.0.1
local_port = 2017
use_compression = true
subdomain = aaa
host_header_rewrite = 127.0.0.1
[CaaS]
type = http
use_compression = true
subdomain = caas4
plugin = http2https
plugin_local_addr = 127.0.0.1:8443
plugin_host_header_rewrite = 127.0.0.1
plugin_header_X-From-Where = frp
[app_web]
type = http
local_ip = 192.168.1.1
local_port = 80
use_compression = true
subdomain = app
http_user = Limour
http_pwd = <APP_PASSWORD>
安装 ServerStatus
服务端
mkdir -p ~/sss && cd ~/sss
wget --no-check-certificate -qO ./serverstatus-config.json https://raw.githubusercontent.com/cppla/ServerStatus/master/server/config.json && mkdir ./serverstatus-monthtraffic
nano docker-compose.yml
sudo docker-compose up -d
# NPM面板反代8001端口，并设置域名解析
version: '3.3'
services:
serverstatus:
restart: always
volumes:
- './serverstatus-config.json:/ServerStatus/server/config.json'
- './serverstatus-monthtraffic:/usr/share/nginx/html/json'
ports:
- '8001:80'
- '35601:35601'
image: 'cppla/serverstatus:latest'
networks:
default:
external: true
name: ngpm
客户端
# 编辑 serverstatus-config.json
# 重启服务端 sudo docker-compose restart
wget --no-check-certificate -qO client-linux.py 'https://raw.githubusercontent.com/cppla/ServerStatus/master/clients/client-linux.py'
chmod +x client-linux.py
# 测试一下：/home/pi/client-linux.py SERVER=sss.limour.top USER=ld_rasp4 PASSWORD=DEFAULTPASSWORD INTERVAL=10
# 创建system服务
sudo nano /etc/systemd/system/ssc.service
sudo systemctl enable ssc
sudo systemctl start ssc
sudo systemctl status ssc
[Unit]
Description=ServerStatus-Client
After=network.target
[Service]
ExecStart=/home/pi/client-linux.py SERVER=45.79.67.132 USER=ld_rasp4 PASSWORD=DEFAULT_PASSWORD INTERVAL=10
ExecReload=/bin/kill -HUP $MAINPID
Restart=on-failure
[Install]
WantedBy=multi-user.target