{"id":17120,"date":"2025-04-07T19:40:48","date_gmt":"2025-04-07T11:40:48","guid":{"rendered":"https:\/\/92it.top\/?p=17120"},"modified":"2025-04-08T21:28:33","modified_gmt":"2025-04-08T13:28:33","slug":"%e6%96%b0%e7%89%88frp%ef%bc%88frp-toml%ef%bc%89%e9%85%8d%e7%bd%ae%e6%96%87%e4%bb%b6%e8%af%a6%e6%83%85","status":"publish","type":"post","link":"https:\/\/92it.top\/?p=17120","title":{"rendered":"\u65b0\u7248frp\uff08frp.toml\uff09\u914d\u7f6e\u6587\u4ef6\u8be6\u60c5"},"content":{"rendered":"\n

\u7b80\u4ecb<\/strong><\/p>\n\n\n\n

\n\n\n\n

frp\u7684\u914d\u7f6e\u6587\u4ef6\u66f4\u65b0\u6210frp.toml\u4e4b\u540e\u5f88\u591a\u4ee5\u524d\u7684\u914d\u7f6e\u90fd\u7528\u4e0d\u6765\u4e86\uff0c\u540e\u9762\u6211\u4e5f\u662f\u627e\u4e86\u633a\u4e45\u624d\u627e\u5230\u8be6\u7ec6\u89e3\u91ca<\/p>\n\n\n\n

\u5b98\u7f51\u5b8c\u6574\u7684\u914d\u7f6e\uff1ahttps:\/\/gofrp.org\/zh-cn\/docs\/reference\/server-configures\/<\/a><\/p>\n\n\n\n

\u70b9\u51fb\u8df3\u8f6c\u539f\u6587<\/a><\/p>\n\n\n\n

\u5b98\u7f51\u5730\u5740\uff1ahttps:\/\/gofrp.org\/zh-cn\/docs\/features\/common\/network\/network\/<\/a><\/p>\n\n\n\n

\u670d\u52a1\u7aef\u8be6\u7ec6\u89e3\u91ca<\/strong><\/p>\n\n\n\n

\n\n\n\n
# \u670d\u52a1\u7aef\u76d1\u542c\u5730\u5740\uff0c\u7528\u4e8e\u63a5\u6536 frpc \u7684\u8fde\u63a5\uff0c\u9ed8\u8ba4\u76d1\u542c 0.0.0.0
bindAddr = \"0.0.0.0\"
# \u670d\u52a1\u7aef\u76d1\u542c\u7aef\u53e3\uff0c\u9ed8\u8ba4\u503c\u4e3a 7000
bindPort = 7000

# \u670d\u52a1\u7aef\u76d1\u542c KCP \u534f\u8bae\u7aef\u53e3\uff0c\u7528\u4e8e\u63a5\u6536\u914d\u7f6e\u4e86\u4f7f\u7528 KCP \u534f\u8bae\u7684 frpc \u8fde\u63a5\u3002\u7aef\u53e3\u53ef\u548c bindPort \u76f8\u540c\uff0c\u672a\u914d\u7f6e\u65f6\u9ed8\u8ba4\u7981\u7528 KCP
kcpBindPort = 7000

# \u670d\u52a1\u7aef\u76d1\u542c QUIC \u534f\u8bae\u7aef\u53e3\uff0c\u7528\u4e8e\u63a5\u6536\u914d\u7f6e\u4e86\u4f7f\u7528 QUIC \u534f\u8bae\u7684 frpc \u8fde\u63a5\u3002\u672a\u914d\u7f6e\u65f6\u9ed8\u8ba4\u7981\u7528 QUIC
quicBindPort = 7002

# \u4ee3\u7406\u76d1\u542c\u5730\u5740\uff0c\u53ef\u4ee5\u4f7f\u4ee3\u7406\u76d1\u542c\u5728\u4e0d\u540c\u7684\u7f51\u5361\u5730\u5740\uff0c\u9ed8\u8ba4\u60c5\u51b5\u4e0b\u540c bindAddr\u3002
proxyBindAddr = \"127.0.0.1\"

# HTTP \u7c7b\u578b\u4ee3\u7406\u76d1\u542c\u7684\u7aef\u53e3\uff0c\u542f\u7528\u540e\u624d\u80fd\u652f\u6301 HTTP \u7c7b\u578b\u7684\u4ee3\u7406\u3002\u7aef\u53e3\u53ef\u548c bindPort \u76f8\u540c\u3002
vhostHTTPPort = 80
# HTTPS \u7c7b\u578b\u4ee3\u7406\u76d1\u542c\u7684\u7aef\u53e3\uff0c\u542f\u7528\u540e\u624d\u80fd\u652f\u6301 HTTPS \u7c7b\u578b\u7684\u4ee3\u7406\u3002\u7aef\u53e3\u53ef\u548c bindPort \u76f8\u540c\u3002
vhostHTTPSPort = 443
# HTTP \u7c7b\u578b\u4ee3\u7406\u5728\u670d\u52a1\u7aef\u7684 ResponseHeader \u8d85\u65f6\u65f6\u95f4\uff0c\u9ed8\u8ba4\u4e3a 60s\u3002
vhostHTTPTimeout = 60
# tcpmux \u7c7b\u578b\u4e14\u590d\u7528\u5668\u4e3a httpconnect \u7684\u4ee3\u7406\u76d1\u542c\u7684\u7aef\u53e3\u3002
tcpmuxHTTPConnectPort = 1337
# \u5bf9\u4e8e tcpmux \u7c7b\u578b\u7684\u4ee3\u7406\u662f\u5426\u900f\u4f20 CONNECT \u8bf7\u6c42\u3002
tcpmuxPassthrough = false

# \u9274\u6743\u914d\u7f6e
## \u9274\u6743\u65b9\u5f0f\uff0c\u53ef\u9009\u503c\u4e3a token \u6216 oidc\uff0c\u9ed8\u8ba4\u4e3a token\u3002
auth.method = \"token\"
## \u9274\u6743\u4fe1\u606f\u9644\u52a0\u8303\u56f4\uff0c\u53ef\u9009\u503c\u4e3a HeartBeats \u548c NewWorkConns
auth.additionalScopes = [\"HeartBeats\", \"NewWorkConns\"]
## \u5728 method \u4e3a token \u65f6\u751f\u6548\uff0c\u5ba2\u6237\u7aef\u9700\u8981\u8bbe\u7f6e\u4e00\u6837\u7684\u503c\u624d\u80fd\u9274\u6743\u901a\u8fc7\u3002
auth.token = \"12345678\"
## oidc \u9274\u6743\u914d\u7f6e\u3002
### oidc issuer specifies the issuer to verify OIDC tokens with.
auth.oidc.issuer = \"\"
### oidc audience specifies the audience OIDC tokens should contain when validated.
auth.oidc.audience = \"\"
### oidc skipExpiryCheck specifies whether to skip checking if the OIDC token is expired.
auth.oidc.skipExpiryCheck = false
### oidc skipIssuerCheck specifies whether to skip checking if the OIDC token's issuer claim matches the issuer specified in OidcIssuer.
auth.oidc.skipIssuerCheck = false

# \u65e5\u5fd7\u914d\u7f6e
## \u65e5\u5fd7\u8f93\u51fa\u6587\u4ef6\u8def\u5f84\uff0c\u5982\u679c\u4e3a console\uff0c\u5219\u4f1a\u5c06\u65e5\u5fd7\u6253\u5370\u5728\u6807\u51c6\u8f93\u51fa\u4e2d\u3002
log.to = \".\/frps.log\"
## \u65e5\u5fd7\u7ea7\u522b\uff0c\u53ef\u9009\u503c\u4e3a trace, debug, info, warn, error\uff0c\u9ed8\u8ba4\u7ea7\u522b\u4e3a info\u3002
log.level = \"info\"
## \u65e5\u5fd7\u6587\u4ef6\u6700\u591a\u4fdd\u7559\u5929\u6570\uff0c\u9ed8\u8ba4\u4e3a 3 \u5929\u3002
log.maxDays = 3
## \u7981\u7528\u6807\u51c6\u8f93\u51fa\u4e2d\u7684\u65e5\u5fd7\u989c\u8272\u3002
log.disablePrintColor = false

# \u670d\u52a1\u7aef Dashboard \u914d\u7f6e\u3002
## webServer \u76d1\u542c\u5730\u5740\uff0c\u9ed8\u8ba4\u4e3a 127.0.0.1\u3002
webServer.addr = \"127.0.0.1\"
## webServer \u76d1\u542c\u7aef\u53e3\u3002
webServer.port = 7500
## HTTP BasicAuth \u7528\u6237\u540d\u3002
webServer.user = \"admin\"
## HTTP BasicAuth \u5bc6\u7801\u3002
webServer.password = \"admin\"
## \u9759\u6001\u8d44\u6e90\u76ee\u5f55\uff0cDashboard \u4f7f\u7528\u7684\u8d44\u6e90\u9ed8\u8ba4\u6253\u5305\u5728\u4e8c\u8fdb\u5236\u6587\u4ef6\u4e2d\uff0c\u901a\u8fc7\u6307\u5b9a\u6b64\u53c2\u6570\u4f7f\u7528\u81ea\u5b9a\u4e49\u7684\u9759\u6001\u8d44\u6e90\u3002
webServer.assetsDir = \".\/static\"
## \u542f\u52a8 Go HTTP pprof\uff0c\u7528\u4e8e\u5e94\u7528\u8c03\u8bd5\u3002
webServer.pprofEnable = false
## Dashboard \u542f\u7528 HTTPS \u7684 TLS \u76f8\u5173\u914d\u7f6e\u3002
### TLS \u8bc1\u4e66\u6587\u4ef6\u8def\u5f84\u3002
webServer.tls.certFile = \"server.crt\"
### TLS \u5bc6\u94a5\u6587\u4ef6\u8def\u5f84\u3002
webServer.tls.keyFile = \"server.key\"

# \u7f51\u7edc\u5c42\u914d\u7f6e\u3002
## \u5141\u8bb8\u5ba2\u6237\u7aef\u8bbe\u7f6e\u7684\u6700\u5927\u8fde\u63a5\u6c60\u5927\u5c0f\uff0c\u5982\u679c\u5ba2\u6237\u7aef\u914d\u7f6e\u7684\u503c\u5927\u4e8e\u6b64\u503c\uff0c\u4f1a\u88ab\u5f3a\u5236\u4fee\u6539\u4e3a\u6700\u5927\u503c\uff0c\u9ed8\u8ba4\u4e3a 5\u3002
transport.maxPoolCount = 5
## \u670d\u52a1\u7aef\u548c\u5ba2\u6237\u7aef\u5fc3\u8df3\u8fde\u63a5\u7684\u8d85\u65f6\u65f6\u95f4\uff0c\u5355\u4f4d\u79d2\uff0c\u9ed8\u8ba4\u4e3a 90 \u79d2\u3002
transport.heartbeatTimeout = 90
## \u548c\u5ba2\u6237\u7aef\u5e95\u5c42 TCP \u8fde\u63a5\u7684 keepalive \u95f4\u9694\u65f6\u95f4\uff0c\u5355\u4f4d\u79d2\uff0c\u914d\u7f6e\u4e3a\u8d1f\u6570\u8868\u793a\u4e0d\u542f\u7528\u3002
transport.tcpKeepalive = 7200
# \u662f\u5426\u542f\u7528 tcp mux
transport.tcpMux = true
## tcp mux \u7684\u5fc3\u8df3\u68c0\u67e5\u95f4\u9694\u65f6\u95f4\uff0c\u5355\u4f4d\u79d2\u3002
transport.tcpMuxKeepaliveInterval = 60
## QUIC \u534f\u8bae\u914d\u7f6e\u53c2\u6570\u3002
transport.quic.keepalivePeriod = 10
transport.quic.maxIdleTimeout = 30
transport.quic.maxIncomingStreams = 100000
## \u670d\u52a1\u7aef TLS \u534f\u8bae\u914d\u7f6e\u3002
### \u662f\u5426\u53ea\u63a5\u53d7\u542f\u7528\u4e86 TLS \u7684\u5ba2\u6237\u7aef\u8fde\u63a5\u3002
tls.force = false
### TLS \u534f\u8bae\u914d\u7f6e
#### TLS \u8bc1\u4e66\u6587\u4ef6\u8def\u5f84\u3002
transport.tls.certFile = \"server.crt\"
#### TLS \u5bc6\u94a5\u6587\u4ef6\u8def\u5f84\u3002
transport.tls.keyFile = \"server.key\"
#### CA \u8bc1\u4e66\u6587\u4ef6\u8def\u5f84\u3002
transport.tls.trustedCaFile = \"ca.crt\"

# \u662f\u5426\u63d0\u4f9b Prometheus \u76d1\u63a7\u63a5\u53e3\uff0c\u9700\u8981\u540c\u65f6\u542f\u7528\u4e86 webServer \u540e\u624d\u4f1a\u751f\u6548\u3002
enablePrometheus = true

# \u670d\u52a1\u7aef\u8fd4\u56de\u8be6\u7ec6\u9519\u8bef\u4fe1\u606f\u7ed9\u5ba2\u6237\u7aef\uff0c\u9ed8\u8ba4\u4e3a true\u3002
detailedErrorsToClient = true

# \u7528\u6237\u5efa\u7acb\u8fde\u63a5\u540e\u7b49\u5f85\u5ba2\u6237\u7aef\u54cd\u5e94\u7684\u8d85\u65f6\u65f6\u95f4\uff0c\u5355\u4f4d\u79d2\uff0c\u9ed8\u8ba4\u4e3a 10 \u79d2\u3002
# userConnTimeout = 10

# \u5141\u8bb8\u4ee3\u7406\u7ed1\u5b9a\u7684\u670d\u52a1\u7aef\u7aef\u53e3\u3002
allowPorts = [
  { start = 2000, end = 3000 },
  { single = 3001 },
  { single = 3003 },
  { start = 4000, end = 50000 }
]

# \u9650\u5236\u5355\u4e2a\u5ba2\u6237\u7aef\u6700\u5927\u540c\u65f6\u5b58\u5728\u7684\u4ee3\u7406\u6570\uff0c\u9ed8\u8ba4\u65e0\u9650\u5236\u3002
maxPortsPerClient = 0

# \u4e8c\u7ea7\u57df\u540d\u540e\u7f00\u3002
subDomainHost = \"frps.com\"

# \u81ea\u5b9a\u4e49 404 \u9519\u8bef\u9875\u9762\u5730\u5740\u3002
custom404Page = \"\/path\/to\/404.html\"

# \u4ee3\u7406 UDP \u670d\u52a1\u65f6\u652f\u6301\u7684\u6700\u5927\u5305\u957f\u5ea6\uff0c\u9ed8\u8ba4\u4e3a 1500\uff0c\u670d\u52a1\u7aef\u548c\u5ba2\u6237\u7aef\u7684\u503c\u9700\u8981\u4e00\u81f4\u3002
udpPacketSize = 1500

# \u6253\u6d1e\u7b56\u7565\u6570\u636e\u7684\u4fdd\u7559\u65f6\u95f4\uff0c\u9ed8\u8ba4\u4e3a 168 \u5c0f\u65f6\uff0c\u5373 7 \u5929\u3002
natholeAnalysisDataReserveHours = 168

# \u670d\u52a1\u7aef HTTP \u63d2\u4ef6\u914d\u7f6e\u3002
[[httpPlugins]]
## \u63d2\u4ef6\u540d\u79f0\u3002
name = \"user-manager\"
## \u63d2\u4ef6\u63a5\u53e3\u7684\u5730\u5740\u3002
addr = \"127.0.0.1:9000\"
## \u63d2\u4ef6\u63a5\u53e3\u7684 Path\u3002
path = \"\/handler\"
## \u63d2\u4ef6\u9700\u8981\u751f\u6548\u7684\u64cd\u4f5c\u5217\u8868\uff0c\u5177\u4f53\u53ef\u9009\u503c\u8bf7\u53c2\u8003\u670d\u52a1\u7aef\u63d2\u4ef6\u7684\u8bf4\u660e\u6587\u6863\u3002
ops = [\"Login\"]

[[httpPlugins]]
name = \"port-manager\"
addr = \"127.0.0.1:9001\"
path = \"\/handler\"
ops = [\"NewProxy\"]<\/pre>\n\n\n\n
\u5ba2\u6237\u7aef\u8be6\u7ec6\u89e3\u91ca<\/strong><\/p>\n\n\n\n
\n\n\n\n
# \u7528\u6237\u540d\uff0c\u8bbe\u7f6e\u6b64\u53c2\u6570\u540e\uff0c\u4ee3\u7406\u540d\u79f0\u4f1a\u88ab\u4fee\u6539\u4e3a {user}.{proxyName}\uff0c\u907f\u514d\u4ee3\u7406\u540d\u79f0\u548c\u5176\u4ed6\u7528\u6237\u51b2\u7a81\u3002
user = \"your_name\"

# \u8fde\u63a5\u670d\u52a1\u7aef\u7684\u5730\u5740\u3002
serverAddr = \"0.0.0.0\"
# \u8fde\u63a5\u670d\u52a1\u7aef\u7684\u7aef\u53e3\uff0c\u9ed8\u8ba4\u4e3a 7000\u3002
serverPort = 7000

# \u9274\u6743\u914d\u7f6e
## \u9274\u6743\u65b9\u5f0f\uff0c\u53ef\u9009\u503c\u4e3a token \u6216 oidc\uff0c\u9ed8\u8ba4\u4e3a token\u3002
auth.method = \"token\"
## \u9274\u6743\u4fe1\u606f\u9644\u52a0\u8303\u56f4\uff0c\u53ef\u9009\u503c\u4e3a HeartBeats \u548c NewWorkConns
auth.additionalScopes = [\"HeartBeats\", \"NewWorkConns\"]
##  \u5728 method \u4e3a token \u65f6\u751f\u6548\uff0c\u5ba2\u6237\u7aef\u9700\u8981\u8bbe\u7f6e\u4e00\u6837\u7684\u503c\u624d\u80fd\u9274\u6743\u901a\u8fc7\u3002
auth.token = \"12345678\"
## oidc \u9274\u6743\u914d\u7f6e\u3002
### oidc.clientID specifies the client ID to use to get a token in OIDC authentication.
auth.oidc.clientID = \"\"
### oidc.clientSecret specifies the client secret to use to get a token in OIDC authentication.
auth.oidc.clientSecret = \"\"
### oidc.audience specifies the audience of the token in OIDC authentication.
auth.oidc.audience = \"\"
### oidc.scope specifies the permisssions of the token in OIDC authentication if AuthenticationMethod == \"oidc\". By default, this value is \"\".
auth.oidc.scope = \"\"
### oidc.tokenEndpointURL specifies the URL which implements OIDC Token Endpoint.It will be used to get an OIDC token.
auth.oidc.tokenEndpointURL = \"\"
### oidc.additionalEndpointParams specifies additional parameters to be sent to the OIDC Token Endpoint.
### For example, if you want to specify the \"audience\" parameter, you can set as follow.
### frp will add \"audience=<value>\" \"var1=<value>\" to the additional parameters.
auth.oidc.additionalEndpointParams.audience = \"https:\/\/dev.auth.com\/api\/v2\/\"
auth.oidc.additionalEndpointParams.var1 = \"foobar\"

# xtcp \u6253\u6d1e\u6240\u9700\u7684 stun \u670d\u52a1\u5668\u5730\u5740\uff0c\u9ed8\u8ba4\u4e3a stun.easyvoip.com:3478\u3002
natHoleStunServer = \"stun.easyvoip.com:3478\"

# \u4f7f\u7528 DNS \u670d\u52a1\u5668\u5730\u5740\uff0c\u9ed8\u8ba4\u4f7f\u7528\u7cfb\u7edf\u914d\u7f6e\u7684 DNS \u670d\u52a1\u5668\uff0c\u6307\u5b9a\u6b64\u53c2\u6570\u53ef\u4ee5\u5f3a\u5236\u66ff\u6362\u4e3a\u81ea\u5b9a\u4e49\u7684 DNS \u670d\u52a1\u5668\u5730\u5740\u3002
dnsServer = \"8.8.8.8\"

# \u7b2c\u4e00\u6b21\u767b\u9646\u5931\u8d25\u540e\u662f\u5426\u9000\u51fa\uff0c\u9ed8\u8ba4\u4e3a true\u3002
loginFailExit = true

# \u65e5\u5fd7\u914d\u7f6e
## \u65e5\u5fd7\u8f93\u51fa\u6587\u4ef6\u8def\u5f84\uff0c\u5982\u679c\u4e3a console\uff0c\u5219\u4f1a\u5c06\u65e5\u5fd7\u6253\u5370\u5728\u6807\u51c6\u8f93\u51fa\u4e2d\u3002
log.to = \".\/frpc.log\"
## \u65e5\u5fd7\u7ea7\u522b\uff0c\u53ef\u9009\u503c\u4e3a trace, debug, info, warn, error\uff0c\u9ed8\u8ba4\u7ea7\u522b\u4e3a info\u3002
log.level = \"info\"
## \u65e5\u5fd7\u6587\u4ef6\u6700\u591a\u4fdd\u7559\u5929\u6570\uff0c\u9ed8\u8ba4\u4e3a 3 \u5929\u3002
log.maxDays = 3
## \u7981\u7528\u6807\u51c6\u8f93\u51fa\u4e2d\u7684\u65e5\u5fd7\u989c\u8272\u3002
log.disablePrintColor = false

# \u5ba2\u6237\u7aef AdminServer \u914d\u7f6e\u3002
## webServer \u76d1\u542c\u5730\u5740\uff0c\u9ed8\u8ba4\u4e3a 127.0.0.1\u3002
webServer.addr = \"127.0.0.1\"
## webServer \u76d1\u542c\u7aef\u53e3\u3002
webServer.port = 7400
## HTTP BasicAuth \u7528\u6237\u540d\u3002
webServer.user = \"admin\"
## HTTP BasicAuth \u5bc6\u7801\u3002
webServer.password = \"admin\"
## \u9759\u6001\u8d44\u6e90\u76ee\u5f55\uff0cDashboard \u4f7f\u7528\u7684\u8d44\u6e90\u9ed8\u8ba4\u6253\u5305\u5728\u4e8c\u8fdb\u5236\u6587\u4ef6\u4e2d\uff0c\u901a\u8fc7\u6307\u5b9a\u6b64\u53c2\u6570\u4f7f\u7528\u81ea\u5b9a\u4e49\u7684\u9759\u6001\u8d44\u6e90\u3002
webServer.assetsDir = \".\/static\"
## \u542f\u52a8 Go HTTP pprof\uff0c\u7528\u4e8e\u5e94\u7528\u8c03\u8bd5\u3002
webServer.pprofEnable = false

# \u5ba2\u6237\u7aef\u7f51\u7edc\u5c42\u914d\u7f6e\u3002
## \u8fde\u63a5\u670d\u52a1\u7aef\u65f6\u6240\u7ed1\u5b9a\u7684\u672c\u5730 IP\u3002
transport.connectServerLocalIP = \"0.0.0.0\"
## \u548c frps \u4e4b\u95f4\u7684\u901a\u4fe1\u534f\u8bae\uff0c\u53ef\u9009\u503c\u4e3a tcp, kcp, quic, websocket, wss\u3002\u9ed8\u8ba4\u4e3a tcp\u3002
transport.protocol = \"tcp\"
## \u8fde\u63a5\u670d\u52a1\u7aef\u7684\u8d85\u65f6\u65f6\u95f4\uff0c\u9ed8\u8ba4\u4e3a 10s\u3002
transport.dialServerTimeout = 10
## \u548c\u670d\u52a1\u7aef\u5e95\u5c42 TCP \u8fde\u63a5\u7684 keepalive \u95f4\u9694\u65f6\u95f4\uff0c\u5355\u4f4d\u79d2\u3002
transport.dialServerKeepalive = 7200
## \u8fde\u63a5\u6c60\u5927\u5c0f\u3002
transport.poolCount = 5
## \u5411\u670d\u52a1\u7aef\u53d1\u9001\u5fc3\u8df3\u5305\u7684\u95f4\u9694\u65f6\u95f4\uff0c\u9ed8\u8ba4\u4e3a 30s\u3002\u5efa\u8bae\u542f\u7528 tcp_mux_keepalive_interval\uff0c\u5c06\u6b64\u503c\u8bbe\u7f6e\u4e3a -1\u3002
transport.heartbeatInterval = 30
## \u548c\u670d\u52a1\u7aef\u5fc3\u8df3\u7684\u8d85\u65f6\u65f6\u95f4\uff0c\u9ed8\u8ba4\u4e3a 90s\u3002
transport.heartbeatTimeout = 90
## TCP \u591a\u8def\u590d\u7528\uff0c\u9ed8\u8ba4\u542f\u7528\u3002
transport.tcpMux = true
## tcp_mux \u7684\u5fc3\u8df3\u68c0\u67e5\u95f4\u9694\u65f6\u95f4\u3002
transport.tcpMuxKeepaliveInterval = 60
## \u8fde\u63a5\u670d\u52a1\u7aef\u4f7f\u7528\u7684\u4ee3\u7406\u5730\u5740\uff0c\u683c\u5f0f\u4e3a {protocol}:\/\/user:passwd@192.168.1.128:8080 protocol \u76ee\u524d\u652f\u6301 http\u3001socks5\u3001ntlm\u3002
transport.proxyURL = \"http:\/\/user:passwd@192.168.1.128:8080\"
transport.proxyURL = \"socks5:\/\/user:passwd@192.168.1.128:1080\"
transport.proxyURL = \"ntlm:\/\/user:passwd@192.168.1.128:2080\"
## QUIC \u534f\u8bae\u914d\u7f6e\u53c2\u6570\u3002
transport.quic.keepalivePeriod = 10
transport.quic.maxIdleTimeout = 30
transport.quic.maxIncomingStreams = 100000
## \u5ba2\u6237\u7aef TLS \u534f\u8bae\u914d\u7f6e\u3002
### \u662f\u5426\u548c\u670d\u52a1\u7aef\u4e4b\u95f4\u542f\u7528 TLS \u8fde\u63a5\uff0c\u9ed8\u8ba4\u542f\u7528\u3002
transport.tls.enable = true
### \u542f\u7528 TLS \u8fde\u63a5\u65f6\uff0c\u4e0d\u53d1\u9001 0x17 \u7279\u6b8a\u5b57\u8282\u3002\u9ed8\u8ba4\u4e3a true\u3002\u5f53\u914d\u7f6e\u4e3a true \u65f6\uff0c\u65e0\u6cd5\u548c vhostHTTPSPort \u7aef\u53e3\u590d\u7528\u3002
transport.tls.disableCustomTLSFirstByte = true
### TLS \u8bc1\u4e66\u6587\u4ef6\u8def\u5f84\u3002
transport.tls.certFile = \"client.crt\"
### TLS \u5bc6\u94a5\u6587\u4ef6\u8def\u5f84\u3002
transport.tls.keyFile = \"client.key\"
### CA \u8bc1\u4e66\u6587\u4ef6\u8def\u5f84\u3002
transport.tls.trustedCaFile = \"ca.crt\"
### TLS Server \u540d\u79f0\u3002
transport.tls.serverName = \"example.com\"

# \u6307\u5b9a\u542f\u7528\u90e8\u5206\u4ee3\u7406\uff0c\u5f53\u914d\u7f6e\u4e86\u8f83\u591a\u4ee3\u7406\uff0c\u4f46\u662f\u53ea\u5e0c\u671b\u542f\u7528\u5176\u4e2d\u90e8\u5206\u65f6\u53ef\u4ee5\u901a\u8fc7\u6b64\u53c2\u6570\u6307\u5b9a\uff0c\u9ed8\u8ba4\u4e3a\u5168\u90e8\u542f\u7528\u3002
start = [\"ssh\", \"dns\"]

# \u4ee3\u7406 UDP \u670d\u52a1\u65f6\u652f\u6301\u7684\u6700\u5927\u5305\u957f\u5ea6\uff0c\u9ed8\u8ba4\u4e3a 1500\uff0c\u670d\u52a1\u7aef\u548c\u5ba2\u6237\u7aef\u9700\u8981\u4fdd\u6301\u914d\u7f6e\u4e00\u81f4\u3002
udpPacketSize = 1500

# \u9644\u52a0\u5143\u6570\u636e\uff0c\u4f1a\u4f20\u9012\u7ed9\u670d\u52a1\u7aef\u63d2\u4ef6\uff0c\u63d0\u4f9b\u9644\u52a0\u80fd\u529b\u3002
metadatas.var1 = \"abc\"
metadatas.var2 = \"123\"

# \u6307\u5b9a\u989d\u5916\u7684\u914d\u7f6e\u6587\u4ef6\u76ee\u5f55\uff0c\u5176\u4e2d\u7684 proxy \u548c visitor \u914d\u7f6e\u4f1a\u88ab\u8bfb\u53d6\u52a0\u8f7d\u3002
includes = [\".\/confd\/*.ini\"]

# \u4ee3\u7406\u914d\u7f6e\uff0c\u4e0d\u540c\u7684\u4ee3\u7406\u7c7b\u578b\u5bf9\u5e94\u4e0d\u540c\u7684\u914d\u7f6e
## TCP\u4ee3\u7406\u914d\u7f6e
[[proxies]]
### \u4ee3\u7406\u540d\u79f0\u3002
name = \"ssh\"
### \u4ee3\u7406\u7c7b\u578b\uff0c\u53ef\u9009\u503c\u4e3a tcp, udp, http, https, tcpmux, stcp, sudp, xtcp\u3002  
type = \"tcp\"
### \u88ab\u4ee3\u7406\u7684\u672c\u5730\u670d\u52a1 IP\uff0c\u9ed8\u8ba4\u4e3a 127.0.0.1\u3002
localIP = \"127.0.0.1\"
### \u88ab\u4ee3\u7406\u7684\u672c\u5730\u670d\u52a1\u7aef\u53e3\u3002
localPort = 22
### \u670d\u52a1\u7aef\u7ed1\u5b9a\u7684\u7aef\u53e3\uff0c\u7528\u6237\u8bbf\u95ee\u670d\u52a1\u7aef\u6b64\u7aef\u53e3\u7684\u6d41\u91cf\u4f1a\u88ab\u8f6c\u53d1\u5230\u5bf9\u5e94\u7684\u672c\u5730\u670d\u52a1\u3002\u82e5\u914d\u7f6e\u4e3a0\u5219\u6216\u968f\u673a\u5206\u914d\u7aef\u53e3
remotePort = 6001
### \u4ee3\u7406\u7f51\u7edc\u5c42\u914d\u7f6e\u3002
#### \u8bbe\u7f6e\u5355\u4e2a proxy \u7684\u5e26\u5bbd\u9650\u6d41\uff0c\u5355\u4f4d\u4e3a MB \u6216 KB\uff0c0 \u8868\u793a\u4e0d\u9650\u5236\uff0c\u5982\u679c\u542f\u7528\uff0c\u9ed8\u8ba4\u4f1a\u4f5c\u7528\u4e8e\u5bf9\u5e94\u7684 frpc\u3002
transport.bandwidthLimit = \"1MB\"
#### \u9650\u6d41\u7c7b\u578b\uff0c\u5ba2\u6237\u7aef\u9650\u6d41\u6216\u670d\u52a1\u7aef\u9650\u6d41\uff0c\u53ef\u9009\u503c\u4e3a client \u548c server\uff0c\u9ed8\u8ba4\u4e3a\u5ba2\u6237\u7aef\u9650\u6d41\u3002
transport.bandwidthLimitMode = \"client\"
#### \u662f\u5426\u542f\u7528\u52a0\u5bc6\u529f\u80fd\uff0c\u542f\u7528\u540e\u8be5\u4ee3\u7406\u548c\u670d\u52a1\u7aef\u4e4b\u95f4\u7684\u901a\u4fe1\u5185\u5bb9\u90fd\u4f1a\u88ab\u52a0\u5bc6\u4f20\u8f93\uff0c\u5982\u679c frpc \u542f\u7528\u4e86\u5168\u5c40 TLS\uff0c\u5219\u4e0d\u9700\u8981\u518d\u542f\u7528\u6b64\u53c2\u6570\u3002
transport.useEncryption = false
#### \u662f\u5426\u542f\u7528\u538b\u7f29\u529f\u80fd\uff0c\u542f\u7528\u540e\u8be5\u4ee3\u7406\u548c\u670d\u52a1\u7aef\u4e4b\u95f4\u7684\u901a\u4fe1\u5185\u5bb9\u90fd\u4f1a\u88ab\u538b\u7f29\u4f20\u8f93\u3002
transport.useCompression = false
### \u8d1f\u8f7d\u5747\u8861\u914d\u7f6e\u3002
#### \u8d1f\u8f7d\u5747\u8861\u5206\u7ec4\u540d\u79f0\uff0c\u7528\u6237\u8bf7\u6c42\u4f1a\u4ee5\u8f6e\u8be2\u7684\u65b9\u5f0f\u53d1\u9001\u7ed9\u540c\u4e00\u4e2a group \u4e2d\u7684\u4ee3\u7406\u3002
loadBalancer.group = \"test_group\"
#### \u8d1f\u8f7d\u5747\u8861\u5206\u7ec4\u5bc6\u94a5\uff0c\u7528\u4e8e\u5bf9\u8d1f\u8f7d\u5747\u8861\u5206\u7ec4\u8fdb\u884c\u9274\u6743\uff0cgroupKey \u76f8\u540c\u7684\u4ee3\u7406\u624d\u4f1a\u88ab\u52a0\u5165\u5230\u540c\u4e00\u4e2a\u5206\u7ec4\u4e2d\u3002
loadBalancer.groupKey = \"123456\"
### \u5065\u5eb7\u68c0\u67e5\u914d\u7f6e\u3002
#### \u5065\u5eb7\u68c0\u67e5\u7c7b\u578b\uff0c\u53ef\u9009\u503c\u4e3a tcp \u548c http\uff0c\u914d\u7f6e\u540e\u542f\u7528\u5065\u5eb7\u68c0\u67e5\u529f\u80fd\uff0ctcp \u662f\u8fde\u63a5\u6210\u529f\u5219\u8ba4\u4e3a\u670d\u52a1\u5065\u5eb7\uff0chttp \u8981\u6c42\u63a5\u53e3\u8fd4\u56de 2xx \u7684\u72b6\u6001\u7801\u5219\u8ba4\u4e3a\u670d\u52a1\u5065\u5eb7\u3002
healthCheck.type = \"tcp\"
#### \u5065\u5eb7\u68c0\u67e5\u8d85\u65f6\u65f6\u95f4(\u79d2)\uff0c\u9ed8\u8ba4\u4e3a 3s\u3002
healthCheck.timeoutSeconds = 3
#### \u5065\u5eb7\u68c0\u67e5\u8fde\u7eed\u9519\u8bef\u6b21\u6570\uff0c\u8fde\u7eed\u68c0\u67e5\u9519\u8bef\u591a\u5c11\u6b21\u8ba4\u4e3a\u670d\u52a1\u4e0d\u5065\u5eb7\uff0c\u9ed8\u8ba4\u4e3a 1\u3002
healthCheck.maxFailed = 3
#### \u5065\u5eb7\u68c0\u67e5\u5468\u671f(\u79d2)\uff0c\u6bcf\u9694\u591a\u957f\u65f6\u95f4\u8fdb\u884c\u4e00\u6b21\u5065\u5eb7\u68c0\u67e5\uff0c\u9ed8\u8ba4\u4e3a 10s\u3002
healthCheck.intervalSeconds = 10
### \u9644\u52a0\u5143\u6570\u636e\uff0c\u4f1a\u4f20\u9012\u7ed9\u670d\u52a1\u7aef\u63d2\u4ef6\uff0c\u63d0\u4f9b\u9644\u52a0\u80fd\u529b\u3002
metadatas.var1 = \"abc\"
metadatas.var2 = \"123\"

## UDP\u4ee3\u7406\u914d\u7f6e
[[proxies]]
name = \"dns\"
type = \"udp\"
localIP = \"114.114.114.114\"
localPort = 53
remotePort = 6002

## HTTP \u914d\u7f6e
[[proxies]]
name = \"web01\"
type = \"http\"
localIP = \"127.0.0.1\"
localPort = 80
### HTTP Basic Auth \u7528\u6237\u540d\u3002
httpUser = \"admin\"
### HTTP Basic Auth \u5bc6\u7801\u3002
httpPassword = \"admin\"
### \u5b50\u57df\u540d\u3002
subdomain = \"web01\"
### \u81ea\u5b9a\u4e49\u57df\u540d\u5217\u8868\u3002
customDomains = [\"web01.yourdomain.com\"]
### URL \u8def\u7531\u914d\u7f6e\u3002
locations = [\"\/\", \"\/pic\"]
### \u6839\u636e HTTP Basic Auth user \u8def\u7531\u3002
routeByHTTPUser = abc
### \u66ff\u6362 Host Header\u3002
hostHeaderRewrite = \"example.com\"
### \u5bf9\u8bf7\u6c42 Header \u7684\u64cd\u4f5c\u914d\u7f6e\u3002
#### \u5728 Header \u4e2d\u8bbe\u7f6e\u6307\u5b9a\u7684 KV \u503c\u3002
requestHeaders.set.x-from-where = \"frp\"
### \u5065\u5eb7\u68c0\u67e5\u914d\u7f6e\u3002
healthCheck.type = \"http\"
#### \u5065\u5eb7\u68c0\u67e5\u7684 HTTP \u63a5\u53e3\uff0c\u5982\u679c\u5065\u5eb7\u68c0\u67e5\u7c7b\u578b\u662f http\uff0c\u5219\u9700\u8981\u914d\u7f6e\u6b64\u53c2\u6570\uff0c\u6307\u5b9a\u53d1\u9001 http \u8bf7\u6c42\u7684 path\uff0c\u4f8b\u5982 \/health\u3002
healthCheck.path = \"\/status\"
healthCheck.intervalSeconds = 10
healthCheck.maxFailed = 3
healthCheck.timeoutSeconds = 3

## HTTPS \u914d\u7f6e
[[proxies]]
name = \"web02\"
type = \"https\"
localIP = \"127.0.0.1\"
localPort = 8000
subdomain = \"web02\"
customDomains = [\"web02.yourdomain.com\"]
# \u542f\u7528 proxy protocol \u534f\u8bae\u7684\u7248\u672c\uff0c\u53ef\u9009\u503c\u4e3a v1 \u548c v2\u3002\u5982\u679c\u542f\u7528\uff0c\u5219 frpc \u548c\u672c\u5730\u670d\u52a1\u5efa\u7acb\u8fde\u63a5\u540e\u4f1a\u53d1\u9001 proxy protocol \u7684\u534f\u8bae\uff0c\u5305\u542b\u4e86\u539f\u8bf7\u6c42\u7684 IP \u5730\u5740\u548c\u7aef\u53e3\u7b49\u5185\u5bb9\u3002
transport.proxyProtocolVersion = \"v2\"

## TCPMux \u914d\u7f6e
[[proxies]]
name = \"tcpmuxhttpconnect\"
type = \"tcpmux\"
multiplexer = \"httpconnect\"
localIP = \"127.0.0.1\"
localPort = 10701
customDomains = [\"tunnel1\"]
# routeByHTTPUser = \"user1\"

[[proxies]]
name = \"plugin_unix_domain_socket\"
type = \"tcp\"
remotePort = 6003
# if plugin is defined, localIP and localPort is useless
# plugin will handle connections got from frps
[proxies.plugin]
type = \"unix_domain_socket\"
unixPath = \"\/var\/run\/docker.sock\"

[[proxies]]
name = \"plugin_http_proxy\"
type = \"tcp\"
remotePort = 6004
[proxies.plugin]
type = \"http_proxy\"
httpUser = \"abc\"
httpPassword = \"abc\"

[[proxies]]
name = \"plugin_socks5\"
type = \"tcp\"
remotePort = 6005
[proxies.plugin]
type = \"socks5\"
username = \"abc\"
password = \"abc\"

[[proxies]]
name = \"plugin_static_file\"
type = \"tcp\"
remotePort = 6006
[proxies.plugin]
type = \"static_file\"
localPath = \"\/var\/www\/blog\"
stripPrefix = \"static\"
httpUser = \"abc\"
httpPassword = \"abc\"

[[proxies]]
name = \"plugin_https2http\"
type = \"https\"
customDomains = [\"test.yourdomain.com\"]
[proxies.plugin]
type = \"https2http\"
localAddr = \"127.0.0.1:80\"
crtPath = \".\/server.crt\"
keyPath = \".\/server.key\"
hostHeaderRewrite = \"127.0.0.1\"
requestHeaders.set.x-from-where = \"frp\"

[[proxies]]
name = \"plugin_https2https\"
type = \"https\"
customDomains = [\"test.yourdomain.com\"]
[proxies.plugin]
type = \"https2https\"
localAddr = \"127.0.0.1:443\"
crtPath = \".\/server.crt\"
keyPath = \".\/server.key\"
hostHeaderRewrite = \"127.0.0.1\"
requestHeaders.set.x-from-where = \"frp\"

[[proxies]]
name = \"plugin_http2https\"
type = \"http\"
customDomains = [\"test.yourdomain.com\"]
[proxies.plugin]
type = \"http2https\"
localAddr = \"127.0.0.1:443\"
hostHeaderRewrite = \"127.0.0.1\"
requestHeaders.set.x-from-where = \"frp\"

[[proxies]]
name = \"secret_tcp\"
# If the type is secret tcp, remotePort is useless
# Who want to connect local port should deploy another frpc with stcp proxy and role is visitor
type = \"stcp\"
# secretKey is used for authentication for visitors
secretKey = \"abcdefg\"
localIP = \"127.0.0.1\"
localPort = 22
# If not empty, only visitors from specified users can connect.
# Otherwise, visitors from same user can connect. '*' means allow all users.
allowUsers = [\"*\"]

[[proxies]]
name = \"p2p_tcp\"
type = \"xtcp\"
secretKey = \"abcdefg\"
localIP = \"127.0.0.1\"
localPort = 22
# If not empty, only visitors from specified users can connect.
# Otherwise, visitors from same user can connect. '*' means allow all users.
allowUsers = [\"user1\", \"user2\"]

# \u8bbf\u95ee\u8005\u914d\u7f6e\uff0c\u4e0d\u540c\u7684\u8bbf\u95ee\u8005\u7c7b\u578b\u5bf9\u5e94\u4e0d\u540c\u7684\u914d\u7f6e
## STCP \u914d\u7f6e
[[visitors]]
### \u8bbf\u95ee\u8005\u540d\u79f0\u3002
name = \"secret_tcp_visitor\"
### \u8bbf\u95ee\u8005\u7c7b\u578b\uff0c\u53ef\u9009\u503c\u4e3a stcp, sudp, xtcp\u3002
type = \"stcp\"
### \u8981\u8bbf\u95ee\u7684 proxy \u540d\u79f0\u3002
serverName = \"secret_tcp\"
### \u5bc6\u94a5\uff0c\u670d\u52a1\u7aef\u548c\u8bbf\u95ee\u7aef\u7684\u5bc6\u94a5\u9700\u8981\u4e00\u81f4\uff0c\u8bbf\u95ee\u7aef\u624d\u80fd\u8bbf\u95ee\u5230\u670d\u52a1\u7aef\u3002
secretKey = \"abcdefg\"
### visitor \u76d1\u542c\u7684\u672c\u5730\u5730\u5740\uff0c\u901a\u8fc7\u8bbf\u95ee\u76d1\u542c\u7684\u5730\u5740\u548c\u7aef\u53e3\uff0c\u8fde\u63a5\u5230\u8fdc\u7aef\u4ee3\u7406\u7684\u670d\u52a1\u3002
bindAddr = \"127.0.0.1\"
### visitor \u76d1\u542c\u7684\u672c\u5730\u7aef\u53e3\uff0c\u5982\u679c\u4e3a -1\uff0c\u8868\u793a\u4e0d\u9700\u8981\u76d1\u542c\u7269\u7406\u7aef\u53e3\uff0c\u901a\u5e38\u53ef\u4ee5\u7528\u4e8e\u4f5c\u4e3a\u5176\u4ed6 visitor \u7684 fallback\u3002
bindPort = 9000

## XTCP \u914d\u7f6e
[[visitors]]
name = \"p2p_tcp_visitor\"
type = \"xtcp\"
### \u8981\u8bbf\u95ee\u7684 proxy \u6240\u5c5e\u7684\u7528\u6237\u540d\uff0c\u5982\u679c\u4e3a\u7a7a\uff0c\u5219\u9ed8\u8ba4\u4e3a\u5f53\u524d\u7528\u6237\u3002
serverUser = \"user1\"
serverName = \"p2p_tcp\"
secretKey = \"abcdefg\"
bindAddr = \"127.0.0.1\"
bindPort = 9001
### \u662f\u5426\u4fdd\u6301\u96a7\u9053\u6253\u5f00\uff0c\u5982\u679c\u5f00\u542f\uff0c\u4f1a\u5b9a\u671f\u68c0\u67e5\u96a7\u9053\u72b6\u6001\u5e76\u5c1d\u8bd5\u4fdd\u6301\u6253\u5f00\u3002
keepTunnelOpen = false
### \u6bcf\u5c0f\u65f6\u5c1d\u8bd5\u6253\u5f00\u96a7\u9053\u7684\u6b21\u6570\uff0c\u9ed8\u8ba4\u503c\u4e3a 8\u3002
maxRetriesAnHour = 8
### \u91cd\u8bd5\u6253\u5f00\u96a7\u9053\u7684\u6700\u5c0f\u95f4\u9694\u65f6\u95f4\uff0c\u5355\u4f4d: \u79d2\uff0c\u9ed8\u8ba4\u4e3a 90s\u3002
minRetryInterval = 90
### \u56de\u9000\u5230\u7684\u5176\u4ed6 visitor \u540d\u79f0\u3002
fallbackTo = \"stcp_visitor\"
### \u8fde\u63a5\u5efa\u7acb\u8d85\u8fc7\u591a\u957f\u65f6\u95f4(ms) \u540e\u56de\u9000\u5230\u5176\u4ed6 visitor\u3002
fallbackTimeoutMs = 500<\/pre>\n","protected":false},"excerpt":{"rendered":"
\u7b80\u4ecb frp\u7684\u914d\u7f6e\u6587\u4ef6\u66f4\u65b0\u6210frp.toml\u4e4b\u540e\u5f88\u591a\u4ee5\u524d\u7684\u914d\u7f6e\u90fd\u7528\u4e0d\u6765\u4e86\uff0c\u540e\u9762\u6211\u4e5f\u662f\u627e\u4e86\u633a\u4e45\u624d\u627e\u5230\u8be6\u7ec6\u89e3\u91ca \u5b98 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11],"tags":[],"_links":{"self":[{"href":"https:\/\/92it.top\/index.php?rest_route=\/wp\/v2\/posts\/17120"}],"collection":[{"href":"https:\/\/92it.top\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/92it.top\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/92it.top\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/92it.top\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=17120"}],"version-history":[{"count":3,"href":"https:\/\/92it.top\/index.php?rest_route=\/wp\/v2\/posts\/17120\/revisions"}],"predecessor-version":[{"id":17126,"href":"https:\/\/92it.top\/index.php?rest_route=\/wp\/v2\/posts\/17120\/revisions\/17126"}],"wp:attachment":[{"href":"https:\/\/92it.top\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=17120"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/92it.top\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=17120"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/92it.top\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=17120"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}