关于 frp+nginx实现内网穿透+共用端口-陌上烟雨遥

首先 frps 和 frpc 对比

[common]
bind_addr = 0.0.0.0
#bind_port frp链接的端口首先必须在安全组开放端口，其次，访问时客户端要和服务端一致
bind_port = 7000
#vhost_http_port ：是自定义的与客户端无关如果定义为8000，首先必须在安全组开放端口，其次，访问时要加端口8000 ，80默认不写
vhost_http_port = 80
vhost_https_port = 443
dashboard_port = 7500
dashboard_pwd = admin

[web01]
type = http
auth_token = admin
custom_domains = www.rjgcs.xyz

==================================

[common] is integral section
[common]
# A literal address or host name for IPv6 must be enclosed
# in square brackets, as in "[::1]:80", "[ipv6-host]:http" or "[ipv6-host%zone]:80"
#要和frps ip保持一致
server_addr = 39.105.212.161
#frps的链接端口7000
server_port = 7000

# Resolve your domain names to [server_addr] so you can use http://web01.yourdomain.com to browse web01 and http://web02.yourdomain.com to browse web02
[web01]
type = http
local_ip = 127.0.0.1
local_port = 80
auth_token = admin
#通过frps 域名 + 自定义访问端口（frps配置文件中的自定义端口）穿透到frpc中对应的 web01 ，并映射到frpc 127.0.0.1 80端口，然后根据后缀本地跳转对应的tomcat
custom_domains = www.rjgcs.xyz

============

再看nginx

worker_processes 1;

events {
worker_connections 1024;
}

http {
include mime.types;
default_type application/octet-stream;
client_max_body_size 50M;

sendfile on;

keepalive_timeout 65;

gzip on;

server {
listen 80;
#server_name www.rjgcs.xyz;

location / {
root html;
index index.html index.htm;
}

error_page 404 /404.html;

error_page 500 502 503 504 /50x.html;
location = /50x.html {
root html;
}
}
//下面是https的部分
server {
listen 80;#这里是http的80端口
server_name www.rjgcs.xyz;

location /rzhy/ {
proxy_pass http://127.0.0.1:8081/rzhy/;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_intercept_errors on;
}
location /mrjc/ {
proxy_pass http://127.0.0.1:8083/mrjc/;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_intercept_errors on;
}
}

server {
listen 443;#外网和内网都用443
server_name www.rjgcs.xyz;#外网服务的域名
ssl on;
ssl_certificate cert/www.rjgcs.xyz.pem;#这里是证书这里的nginx也要安装证书多个tomcat可以共用一个域名，以项目后缀区分
ssl_certificate_key cert/www.rjgcs.xyz.key;#这里是证书
ssl_session_timeout 5m;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
location /rzhy/ { #也可以多个项目共用一个tomcat 就不需要改8443了
proxy_pass https://127.0.0.1:18443/rzhy/;#根据请求后缀跳转这里两个tomcat分别改为 18443 ,28443
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_intercept_errors on;
}
location /mrjc/ {
proxy_pass https://127.0.0.1:28443/mrjc/;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_intercept_errors on;
}
}
}