IT Men's VPS Series Tutorial Part One: Intranet Penetration (Frp)

I. Overview

This article is an article of partial technology. The targeted people have not been exposed to the white paper in this field. Although it is a technical article, it is not very difficult. I am also a management professional born and sold now. Look at Aunt Zhang's article here is really not much, so it is worth mentioning.

The article is a series of tutorials. Since there are too many ideas in the mind, there is no motivation to write them out at one time, so the series is made.

What is VPS?

VPS (Virtual Private Server) can be understood as a small server or virtual machine, but it generally has a public network IP, and has powerful CPU and network bandwidth sharing. Generally, it is a Linux system, and hardware is centralized for maintenance and management ( Someone gives you maintenance hardware.) The most critical system belongs to you. How to toss. VPS (Wikipedia Explained), Other Knowledge Development: Differences Between VPS and Web Hosting

It can be understood that VPS is just a server on the Internet, but it can implement many functions.

What do I plan to do with it? What is the series of articles intended to write?

1. Intranet Penetration - Rescuing Partners Without Public IP (Page 1)
2. Network disk privatization - coping with the public network disk crisis
3. Personal blog - privatizing blog data, telling about the application of Wordpress
4. Scientific Internet - An important reason why VPS gets hot
5. VPS purchase and self-built VPS - purchase Raiders and use NAS self-built VPS

Feeling above the pit dig a bit big, slowly write it little by little.

Second, intranet penetration (Frp) - to save you from the public IP

At present, all major operators are reducing the provision of public network IP to individual users. This is a trend, and it is estimated that there will be no improvement before the popularization of IPv6. Although we can use customer service to return to the public network, it is too difficult. Even if we have to get to the operators, we must disgust you. Therefore, the external network access to home routers, NAS, and smart homes has become a problem.

There are also many solutions for the lack of public IP: AnyConnect, Peanut Shell, Ngrok, Frp, etc. Since only Blackgroup can't use Anyconnect in the hands, several others have used it. From the effect Frp works best, so this article focuses on this tutorial.

(1) Preparation: A VPS, a router (Merlin firmware), a domain name, a Putty software

1, purchase VPS: generally divided into domestic and foreign two, the domestic delay is low but the price is slightly higher, and sometimes also need to record; foreign delay is high, relatively cheap. Alibaba Cloud, Tencent Cloud, etc. are recommended domestically, and Amazon, Vultr (recommended), Digitalocean, Linode, etc. are recommended abroad. Of course, there are some cheaper one-year-old swords that can also be used for scouring.

At present, I use Vultr's Japan node for stable use for a long period of time, 5 kniper/month: Buy Link (this is my promotion link, I don't like to be able to own Baidu's official website). In addition, the impression of Alibaba Cloud is relatively good, and the recent price reduction is very fierce. It is about 30 blocks a month.

The following uses Vultr as an example to enter the official website after the registration, after registration can be paid by credit card or Palpay, not binding credit card or no payment is useless. After entering the home page you can see:

Create a new VPS

Selecting a location, generally speaking, Asia has a good speed, but we also look at the situation of operators and suggest that we test ourselves. Shandong Mobile is very friendly to Japanese nodes here.

Select the operating system, the general CentOS and Ubuntu, I usually ubuntu used to pay attention to different operating system commands slightly different.

Memory generally depends on how many applications are hung, if the light considers frp 512 basic enough, but also see, the Tokyo node $ 2.5 basic Sold Out.

After the construction is completed, you can see the specific information. Generally, you need to remember three data: IP address, user name, and password (hidden, you can see by clicking the small eyes), and vps is established here.

Note: vultr is charged by the hour; in addition, do not choose other items at will, you should charge for some things, I will be handcuffed .....

2, buy domain name: Alibaba Cloud wintop and other domain names only a few dollars a year. Purchase link

Win's domain name is only 4 years in a year, once bought for 10 years, although it is not suitable for establishing a station but doing other things is still good.

After buying it, enter the management interface and click "Resolve". Add two A records. The record value is just the IP address of VPS. The host records are * and @ respectively, meaning that all the sub-domains of this domain name point to the VPS host.

3, install Putty: Xshell or Putty can be, this is a command line tool, is used to log VPS execution of the tool. Since the Linux system is used, all operations are basically command line, and there are few graphical interfaces. Download address: Putty

Download good putty, enter your VPS ip address

A prompt will pop up when you connect for the first time. Click Yes.

After entering the user name root, enter the password (VPS password, which is covered by small eyes there), pay attention to when entering the password is not displayed, but in fact has been input, and directly enter after a good return . It is convenient to have a copy beside the little eye, and then putty click on the right button to paste it.

(two) install frp server, client

Frp is an open source program. Since my router is Merlin, Merlin's router is an example. Koolshare has basically been made as a key script, very convenient. Of course, not Merlin's routers can also be used. For details, you can check the official website of Frp.

KoolShare has plug-ins and tutorials on the forums. It's just moving bricks and posting original stickers. Thanks to the Koolshare forum and the big cows involved, there is no such convenient tool without their selfless dedication.

1, the server (VPS)

Enter the following command, one at a time, for a total of four:
Apt-get update
Wget --no-check-certificate https://raw.githubusercontent.com/clangcn/onekey-install-shell/master/frps/install-frps.sh -O ./install-frps.sh
Chmod 700 ./install-frps.sh
./install-frps.sh install

Then he will let you lose some parameters, all parameters have default values, the direct carriage return is to enter the default value:

Please input frps bind_port [1-65535] (Default Server Port: 5443): # Enter the port that frp provides services for server and client communication. The default is
Please input frps vhost_http_port [1-65535] (Default vhost_http_port: 80): # Enter frp to http port http service, it is recommended not to use default
Please input frps vhost_https_port [1-65535](Default vhost_https_port: 443): #Enter frp https port to https through, it is recommended not to use the default
Please input frps dashboard_port [1-65535] (Default dashboard_port: 6443): # Enter the console service port of frp to view the frp working status.
Please input dashboard_user (Default: admin):#Login the console user name, the default is
Please input dashboard_pwd (Default: kpkpM7VZ): #Login the console password, if you cannot remember the default suggestion modification
Please input privilege_token (Default: 9m2UAOWa6hx5Eise): # Enter the password for the communication between the frp server and the client. The default is randomly generated.
Please input frps max_pool_count [1-200] (Default max_pool_count: 50): #Set the maximum number of connection pools that each proxy can create, default 50
##### Please select log_level #####
1: info
2: warn
3: error
4: debug
################################################## ###
Enter your choice (1, 2, 3, 4 or exit. default [1]):
Please input frps log_max_days [1-30] (Default log_max_days: 3 day):
##### Please select log_file #####
1: enable
2: disable
################################################## ###
Enter your choice (1, 2 or exit. default [1]): the default is

After the installation is complete, the following content will pop up, indicating the specific information. All operations are completed on this server.

You can visit the ip address + console port to view, because there is no established connection, so they are empty.

2, the client (router)

The client enters Merlin's firmware, clicks Software Center, and installs frpc.

After entering the previous configuration information, it must be filled in according to the configuration you just installed frp.

After that is to increase the penetration of the connection, here to elaborate. (For an example of penetrating a router)
The protocol type is generally http, https, tcp, etc.
Service name starts casually, such as router
Domain configuration fill router.frp-ss.win
Intranet address fill in router ip such as 192.168.1.1
Internal port 80
Remote host port fill in the above http through service port 8080
This means that when the external network access router.frp-ss.win:8080, VPS will establish a connection to your intranet 192.168.1.1:80

Look at the effect:

Access the main route

Access secondary routes

(III) Others

1, just a few examples are basically penetrated through http, https, but Frp can also penetrate tcp, such as penetrating remote login port 3389, you can directly log in from the external network windows, pay attention to the time in the transmission of intranet Ports and extranet ports should be changed accordingly.

2, for other routers can also be achieved, but there is no point in the formation of a key package Meilin slightly trouble, you can study on their own.

3. You may think that $5 a month or even $2.5 a month is expensive. Indeed, if the price advantage of a single intranet penetration VPS is not obvious, but a VPS can achieve too many functions, I currently have a $5 VPS Hundreds of blog sites, an Owncloud private network disk, intranet penetration, scientific Internet access, VPN, and so on, may not be expensive. Therefore, the key is to fully exploit the role of VPS. Tutorial completion.

The next tutorial plan is to build a private network disk via VPS and mount Drop, Google's web disk on a private network disk.

Finally, the above content is to thank netizens for their selfless sharing. And use and cherish and maintain gratitude.

Fiber Optic Patch Panel

Fiber Optic Patch Panel,Fiber Patch Panel,Fiber Distribution Panel,Optical Patch Panel

Cixi Dani Plastic Products Co.,Ltd , https://www.danifiberoptic.com