nps简介
背景
|
1 2 3 4 5 6 |
nps是一款轻量级、高性能、功能强大的内网穿透代理服务器。目前支持tcp、udp流量转发，可支持任何tcp、udp上层协议（访问内网网站、本地支付接口调试、ssh访问、远程桌面，内网dns解析等等……），此外还支持内网http代理、内网socks5代理、p2p等，并带有功能强大的web管理端。 1、做微信公众号开发、小程序开发等----> 域名代理模式 2、想在外网通过ssh连接内网的机器，做云服务器到内网服务器端口的映射，----> tcp代理模式 3、在非内网环境下使用内网dns，或者需要通过udp访问内网机器等----> udp代理模式 4、在外网使用HTTP代理访问内网站点----> http代理模式 5、搭建一个内网穿透ss，在外网如同使用内网vpn一样访问内网资源或者设备----> socks5代理模式 |
端口、密码和IP说明
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 |
假设公网服务器ip为172.16.186.11 nps默认配置文件使用80，443，8080，8024端口 80和443端口用于主机模式默认端口 8080为web管理访问端口，web登陆账密默认为admin/nps.conf中的web_password项定义 8024为网桥端口，用于服务器和客户端之间的通信 服务端IP 172.16.186.11/24(外)/node1 172.16.1.11/24(内)/node1 Linux客户端IP 172.16.1.12/24/nod2 Win客户端IP 172.16.1.13/24 |
服务端前期配置
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 |
1、关闭防火墙、SELinux [root@node1 ~]# systemctl stop firewalld && systemctl disable firewalld [root@node1 ~]# sed -i "s/SELINUX=enforcing/SELINUX=disabled/" /etc/selinux/config [root@node1 ~]# setenforce 0 2、时间同步 [root@node1 ~]# vim /etc/chrony.conf #server 0.centos.pool.ntp.org iburst #server 1.centos.pool.ntp.org iburst #server 2.centos.pool.ntp.org iburst #server 3.centos.pool.ntp.org iburst server ntp.aliyun.com iburst [root@node1 ~]# systemctl restart chronyd && systemctl enable chronyd [root@node1 ~]# chronyc sources 3、配置IP [root@node1 ~]# cd /etc/sysconfig/network-scripts/ # 配置外网IP [root@node1 network-scripts]# vim ifcfg-ens33 TYPE="Ethernet" BOOTPROTO="none" NAME="ens33" DEVICE="ens33" ONBOOT="yes" IPADDR="172.16.186.11" ===> 外网IP PREFIX="24" GATEWAY="172.16.186.2" DNS1="172.16.186.2" # 配置内网IP [root@node1 network-scripts]# cp ifcfg-ens33 ifcfg-ens36 [root@node1 network-scripts]# vim ifcfg-ens36 TYPE="Ethernet" BOOTPROTO="static" NAME="ens36" DEVICE="ens36" ONBOOT="yes" IPADDR="172.16.1.11" ===> 内网地址 PREFIX="24" [root@node1 network-scripts]# systemctl stop NetworkManager && systemctl disable NetworkManager [root@node1 network-scripts]# systemctl restart network [root@node1 network-scripts]# ip a |
服务端搭建
如下载时出现访问异常，可在有互联网的机器上打开https://www.ipaddress.com、然后输入github.com，找到对应的IP，将其写到hosts文件中
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 |
[root@node1 ~]# mkdir nps && cd nps [root@node1 nps]# wget https://github.com/ehang-io/nps/releases/download/v0.26.10/linux_amd64_server.tar.gz [root@node1 np]# tar -zxvf linux_amd64_server.tar.gz [root@node1 np]# vim conf/nps.conf appname = nps #Boot mode(dev|pro) runmode = dev #HTTP(S) proxy port, no startup if empty http_proxy_ip=0.0.0.0 http_proxy_port=80 ===> 80、443用于主机模式默认端口 https_proxy_port=443 https_just_proxy=true #default https certificate setting https_default_cert_file=conf/server.pem https_default_key_file=conf/server.key ##bridge bridge_type=tcp ===> 服务端类型 bridge_port=8024 ===> 8024为网桥端口，用于服务端和客户端之间的通信链接端口 bridge_ip=0.0.0.0 public_vkey=8rehr93fwurfj04j ===> 客户端连接服务端认证使用，是客户端连接服务端的密钥 log_level=7 web_host=a.o.com ===> 服务端web的地址/域名 web_username=admin ===> 服务端web的登陆名 web_password=aa77&88bb ===> 服务端web的登陆密码 web_port = 8080 ===> 8080是web管理访问端口 web_ip=0.0.0.0 web_base_url= ===> 可设置web路径,eg：web_base_url=/nps web_open_ssl=false ===> 服务端是否开启https web_cert_file=conf/server.pem web_key_file=conf/server.key auth_crypt_key =1234567812345678 ===> web api认证ip密钥，可改但必须16位 #allow_ports=9001-9009,10001,11000-12000 ===> 字面意思 #Web management multi-user login allow_user_login=false allow_user_register=false allow_user_change_username=false #extension allow_flow_limit=false allow_rate_limit=false allow_tunnel_num_limit=false allow_local_proxy=false allow_connection_num_limit=false allow_multi_ip=false system_info_display=false #cache http_cache=false http_cache_length=100 #get origin ip http_add_origin_header=true ===> 默认为false #pprof debug options #pprof_ip=0.0.0.0 #pprof_port=9999 #client disconnect timeout(客户端断开超时时间) disconnect_timeout=60 安装并启动 执行完下述命令后会把当前的配置文件和web静态文件拷贝到/etc/nps下，以后修改配置文件直接修改 /etc/nps/conf/nps.conf [root@node1 nps]# ./nps install 2021/08/03 21:41:13 copy file ::/root/nps/conf/clients.json to /etc/nps/conf/clients.json 2021/08/03 21:41:13 copy file ::/root/nps/conf/hosts.json to /etc/nps/conf/hosts.json 2021/08/03 21:41:13 copy file ::/root/nps/conf/nps.conf to /etc/nps/conf/nps.conf 2021/08/03 21:41:13 copy file ::/root/nps/conf/server.key to /etc/nps/conf/server.key 2021/08/03 21:41:13 copy file ::/root/nps/conf/server.pem to /etc/nps/conf/server.pem 2021/08/03 21:41:13 copy file ::/root/nps/conf/tasks.json to /etc/nps/conf/tasks.json 2021/08/03 21:41:13 copy file ::/root/nps/web/views/client/add.html to /etc/nps/web/views/client/add.html 2021/08/03 21:41:13 mkdir:/etc/nps/web/views/client/ 2021/08/03 21:41:13 copy file ::/root/nps/web/views/client/edit.html to /etc/nps/web/views/client/edit.html 2021/08/03 21:41:13 copy file ::/root/nps/web/views/client/list.html to /etc/nps/web/views/client/list.html 2021/08/03 21:41:13 copy file ::/root/nps/web/views/index/add.html to /etc/nps/web/views/index/add.html 2021/08/03 21:41:13 mkdir:/etc/nps/web/views/index/ 2021/08/03 21:41:13 copy file ::/root/nps/web/views/index/edit.html to /etc/nps/web/views/index/edit.html 2021/08/03 21:41:13 copy file ::/root/nps/web/views/index/hadd.html to /etc/nps/web/views/index/hadd.html 2021/08/03 21:41:13 copy file ::/root/nps/web/views/index/hedit.html to /etc/nps/web/views/index/hedit.html 2021/08/03 21:41:13 copy file ::/root/nps/web/views/index/help.html to /etc/nps/web/views/index/help.html 2021/08/03 21:41:13 copy file ::/root/nps/web/views/index/hlist.html to /etc/nps/web/views/index/hlist.html 2021/08/03 21:41:13 copy file ::/root/nps/web/views/index/index.html to /etc/nps/web/views/index/index.html 2021/08/03 21:41:13 copy file ::/root/nps/web/views/index/list.html to /etc/nps/web/views/index/list.html 2021/08/03 21:41:13 copy file ::/root/nps/web/views/login/index.html to /etc/nps/web/views/login/index.html 2021/08/03 21:41:13 mkdir:/etc/nps/web/views/login/ 2021/08/03 21:41:13 copy file ::/root/nps/web/views/login/register.html to /etc/nps/web/views/login/register.html 2021/08/03 21:41:13 copy file ::/root/nps/web/views/public/error.html to /etc/nps/web/views/public/error.html 2021/08/03 21:41:13 mkdir:/etc/nps/web/views/public/ 2021/08/03 21:41:13 copy file ::/root/nps/web/views/public/layout.html to /etc/nps/web/views/public/layout.html 2021/08/03 21:41:13 copy file ::/root/nps/web/static/css/bootstrap-table.min.css to /etc/nps/web/static/css/bootstrap-table.min.css 2021/08/03 21:41:13 mkdir:/etc/nps/web/static/css/ 2021/08/03 21:41:13 copy file ::/root/nps/web/static/css/bootstrap.min.css to /etc/nps/web/static/css/bootstrap.min.css 2021/08/03 21:41:13 copy file ::/root/nps/web/static/css/datatables.css to /etc/nps/web/static/css/datatables.css 2021/08/03 21:41:13 copy file ::/root/nps/web/static/css/fontawesome.min.css to /etc/nps/web/static/css/fontawesome.min.css 2021/08/03 21:41:13 copy file ::/root/nps/web/static/css/regular.min.css to /etc/nps/web/static/css/regular.min.css 2021/08/03 21:41:13 copy file ::/root/nps/web/static/css/solid.min.css to /etc/nps/web/static/css/solid.min.css 2021/08/03 21:41:13 copy file ::/root/nps/web/static/css/style.css to /etc/nps/web/static/css/style.css 2021/08/03 21:41:13 copy file ::/root/nps/web/static/img/flag/en-US.png to /etc/nps/web/static/img/flag/en-US.png 2021/08/03 21:41:13 mkdir:/etc/nps/web/static/img/ 2021/08/03 21:41:13 mkdir:/etc/nps/web/static/img/flag/ 2021/08/03 21:41:13 copy file ::/root/nps/web/static/img/flag/zh-CN.png to /etc/nps/web/static/img/flag/zh-CN.png 2021/08/03 21:41:13 copy file ::/root/nps/web/static/js/bootstrap-table-locale-all.min.js to /etc/nps/web/static/js/bootstrap-table-locale-all.min.js 2021/08/03 21:41:13 mkdir:/etc/nps/web/static/js/ 2021/08/03 21:41:13 copy file ::/root/nps/web/static/js/bootstrap-table.min.js to /etc/nps/web/static/js/bootstrap-table.min.js 2021/08/03 21:41:13 copy file ::/root/nps/web/static/js/bootstrap.min.js to /etc/nps/web/static/js/bootstrap.min.js 2021/08/03 21:41:13 copy file ::/root/nps/web/static/js/echarts.min.js to /etc/nps/web/static/js/echarts.min.js 2021/08/03 21:41:13 copy file ::/root/nps/web/static/js/fontawesome.min.js to /etc/nps/web/static/js/fontawesome.min.js 2021/08/03 21:41:13 copy file ::/root/nps/web/static/js/inspinia.js to /etc/nps/web/static/js/inspinia.js 2021/08/03 21:41:13 copy file ::/root/nps/web/static/js/jquery-3.4.1.min.js to /etc/nps/web/static/js/jquery-3.4.1.min.js 2021/08/03 21:41:13 copy file ::/root/nps/web/static/js/language.js to /etc/nps/web/static/js/language.js 2021/08/03 21:41:13 copy file ::/root/nps/web/static/js/popper.min.js to /etc/nps/web/static/js/popper.min.js 2021/08/03 21:41:13 copy file ::/root/nps/web/static/page/error.html to /etc/nps/web/static/page/error.html 2021/08/03 21:41:13 mkdir:/etc/nps/web/static/page/ 2021/08/03 21:41:13 copy file ::/root/nps/web/static/page/languages.xml to /etc/nps/web/static/page/languages.xml 2021/08/03 21:41:13 copy file ::/root/nps/web/static/webfonts/fa-solid-900.eot to /etc/nps/web/static/webfonts/fa-solid-900.eot 2021/08/03 21:41:13 mkdir:/etc/nps/web/static/webfonts/ 2021/08/03 21:41:13 copy file ::/root/nps/web/static/webfonts/fa-solid-900.svg to /etc/nps/web/static/webfonts/fa-solid-900.svg 2021/08/03 21:41:13 copy file ::/root/nps/web/static/webfonts/fa-solid-900.ttf to /etc/nps/web/static/webfonts/fa-solid-900.ttf 2021/08/03 21:41:13 copy file ::/root/nps/web/static/webfonts/fa-solid-900.woff to /etc/nps/web/static/webfonts/fa-solid-900.woff 2021/08/03 21:41:13 copy file ::/root/nps/web/static/webfonts/fa-solid-900.woff2 to /etc/nps/web/static/webfonts/fa-solid-900.woff2 2021/08/03 21:41:13 install ok! 2021/08/03 21:41:13 Static files and configuration files in the current directory will be useless 2021/08/03 21:41:13 The new configuration file is located in /etc/nps you can edit them 2021/08/03 21:41:13 You can start with: nps start|stop|restart|uninstall|update or nps-update update anywhere! 启动nps服务端服务 [root@node1 nps]# ./nps start [root@node1 nps]# netstat -anpt | egrep '(8080|8024)' tcp6 0 0 :::8080 :::* LISTEN 11369/nps tcp6 0 0 :::8024 :::* LISTEN 11369/nps |
浏览器登陆
http://YOU-IP:8080
客户端(Linux)配置并启动
这里在服务端上把Linux端的安装包下载下来，然后发送到Linux客户端
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 |
# 服务端下载客户端安装包 [root@node1 nps]# wget https://github.com/ehang-io/nps/releases/download/v0.26.10/linux_amd64_client.tar.gz win：https://github.com/ehang-io/nps/releases/download/v0.26.10/windows_amd64_client.tar.gz # 来到客户端进行安装 [root@node2 ~]# tar -zxvf linux_amd64_client.tar.gz [root@node2 ~]# cp conf/npc.conf{,.bak} [root@node2 ~]# vim conf/npc.conf [common] server_addr=172.16.1.11:8024 ===> 8024为网桥端口(供服务器和客户端间通信) conn_type=tcp ===> 服务器和客户端间通信使用的协议 vkey=8rehr93fwurfj04j ===> 和服务端nps.conf中public_vkey项对应 auto_reconnection=true ===> 断开后是否重新连接 max_conn=1000 ===> 最大连接数 flow_limit=1000 ===> 流量限制 rate_limit=1000 ===> 速率限制 basic_username=11 ===> server配置的basic用户名和web_username，用于http、socks5代理认证 basic_password=3 web_username=admin ===> 关于web的这两项要和服务端中nps.conf中对应 web_password=aa77&88bb crypt=true ===> 是否加密传输 compress=true ===> 是否压缩传输 disconnect_timeout=120 ===> 断开连接超时时间 # 注：其他的都删除，只留 [common] 段里面的项 客户端启动nps [root@node2 ~]# ./npc 或者 nohup ./npc >> nps.log & 2021/08/03 22:29:55.352 [I] [npc.go:231] the version of client is 0.26.10, the core version of client is 0.26.0 2021/08/03 22:29:55.352 [I] [control.go:97] Loading configuration file conf/npc.conf successfully 2021/08/03 22:29:55.358 [N] [control.go:176] web access login username:admin password:aa77&88bb 2021/08/03 22:29:55.360 [I] [client.go:72] Successful connection with server 172.16.1.11:8024 [root@node2 ~]# netstat -anpt | egrep '(sshd | *npc)' tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 964/sshd tcp 0 0 172.16.1.12:42590 172.16.1.11:8024 ESTABLISHED 2341/./npc tcp 0 0 172.16.1.12:58046 172.16.1.12:22 ESTABLISHED 2341/./npc tcp 0 0 172.16.1.12:42588 172.16.1.11:8024 ESTABLISHED 2341/./npc tcp 0 0 172.16.1.12:58044 172.16.1.12:22 ESTABLISHED 2341/./npc tcp6 0 0 :::22 :::* LISTEN 964/sshd [root@node2 ~]# ll /proc/2341/exe lrwxrwxrwx. 1 root root 0 Aug 3 22:31 /proc/2341/exe -> /root/npc 在web页面上能看到node2连接的情况，但是现在仅限于在客户端和服务端建立了一个连接，但是你想通过服务端的哪个端口连接客户端的哪个端口等这些都未定义，下面进行定义 |
客户端(Windows)配置并启动
在web页面上创建第二台主机的配置，如下图
下图为上图中test win这台机的编辑 (垃圾桶右边的选项) 项打开后的画面
接下来在服务端上把Win端的安装包下载下来，然后使用http来供Win端下载
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 |
[root@node1 ~]# wget https://github.com/ehang-io/nps/releases/download/v0.26.10/windows_amd64_client.tar.gz 安装httpd [root@node1 ~]# yum -y install httpd 注：因为npc占用了80端口，所以需要改下httpd的端口后才能进行启动httpd [root@node1 ~]# systemctl status httpd .... .... Aug 04 00:16:20 node1 httpd[12726]: (98)Address already in use: AH00072: make_sock: could not bind to address [::]:80 Aug 04 00:16:20 node1 httpd[12726]: (98)Address already in use: AH00072: make_sock: could not bind to address 0.0.0.0:80 Aug 04 00:16:20 node1 httpd[12726]: no listening sockets available, shutting down [root@node1 ~]# netstat -anpt|grep -w :80 tcp6 0 0 :::80 :::* LISTEN 2549/nps 修改httpd端口 [root@node1 ~]# sed -i "s/Listen 80/Listen 808/" /etc/httpd/conf/httpd.conf 启动httpd [root@node1 ~]# systemctl restart httpd [root@node1 ~]# mv windows_amd64_client.tar.gz /var/www/html/ 在win客户端上从服务端上下载安装包 http://172.16.1.11/windows_amd64_client.tar.gz |
在win端打开cmd输入下列命令
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 |
C:\Users\rambo>cd /d d:\test 使用Sublime Text打开npr.conf文件并进行修改，修改如下 [common] server_addr=172.16.1.11:8024 ===> 8024为网桥端口(供服务器和客户端间通信) conn_type=tcp ===> 服务器和客户端间通信使用的协议 vkey=xwv01ar8isb04wpn ===> 和web页面上创建主机时的"唯一验证秘钥"对应 auto_reconnection=true ===> 断开后是否重新连接 max_conn=1000 ===> 最大连接数 flow_limit=1000 ===> 流量限制 rate_limit=1000 ===> 速率限制 basic_username=11 ===> server配置的basic用户名和web_username，用于http、socks5代理认证 basic_password=3 web_username=admin ===> 关于web的这两项要和服务端中nps.conf中对应 web_password=aa77&88bb crypt=true ===> 是否加密传输 compress=true ===> 是否压缩传输 disconnect_timeout=120 ===> 断开连接超时时间 # 注：其他的都删除，只留 [common] 段里面的项 启动nps(方法1) 使用管理员运行cmd # cmd下进入d盘的test目录中 cd /d d:\test # 安装nps npc.exe install npc.exe start 方法2见下图 |
|
1 2 3 4 5 6 7 |
启动npc(方法3) d:\test>npc.exe -server=172.16.1.11:8024 -vkey=8rehr93fwurfj04j -type=tcp 注： 上面命令中的IP是服务端 IP 端口是服务端 nps.conf 中#bridge设置的桥接端口 -vkey有两种，一种是自动生成，一种是在服务端 nps.conf 中 public_vkey项自定义 该方法不使用文件进行启动 |
测试和服务端和win客户端间的连接
如不知道怎么在客户端启动可看下图
发表评论
要发表评论，您必须先登录。