[Qunhui] no port access (reverse proxy + intranet penetration)

. ： You have previously applied for a domain name using Alibaba cloud , Use docker Alibaba dynamic domain name resolution （ Dynamic public network ip）; When you use a domain name to access, you always need a port to access it , After more than one service from Qunhui , The port is always confused , Thinking about how to access Qunhui without ports , Think and try , success ！ Make this record .

Reference article ： Synology NAS Reverse proxy + Intranet through = No port is required to access all services in the intranet - Siyouyun - IOIOX

Synology NAS Use Docker Installation configuration frpc Intranet penetration tutorial - Siyouyun - IOIOX

The knowledge points involved this time ： Reverse proxy （ Qunhui comes with ）、 Intranet through （ With frp For example ）, Synology docker install frpc client

Reverse proxy

A device or server has 65535 individual Port number , and 80/443 There's only one port , When a website is deployed in your device, it uses 80/443 After the port , Then other services and websites cannot be used 80/443 Port of . It's time to Reverse proxy To solve .
Qunhui reverse proxy server   First, occupy Qunhui NAS Of 80/443 port , Use any domain name without port access ( As mentioned above, no port is used  80/443  port ), Will access the reverse proxy server , According to the visiting domain name, it forwards it to the local machine or other services on the intranet .

Intranet through （ Server side 、 client ）

The preface has made it clear that there is no home broadband 80/443 Port of , So the reverse proxy server mentioned above uses 80/443 port , The Internet is inaccessible , Then you need to cooperate with the intranet penetration service to enable the external network to access the reverse proxy server of Qunhui 80/443 port .
Intranet penetration requires a computer with Public network IP and 80/443 Port server , Provided by general cloud service providers VPS The service can meet the demand , And deploy frps Server side . Hereinafter referred to as frp The server . So when you want to visit an intranet site , In fact, you should visit frp Server's 80/443 port , In by frp The server Forward to the intranet Qunhui reverse proxy server Of 80/443 port , In by Qunhui reverse proxy server Forward to 5000/5001/3001/80 Wait for the port .

Intranet penetration requires frps service ; If you have a public network server, you can build it yourself , Of course, others have built it , I'm using :Free FRP free FRP Intranet through

  The above is the free server , Next, install the client

 

 

  Configure... In the storage space frpc.ini

To configure frpc.ini Reference resources

[common]
server_addr = frp.freefrp.net     #  The server IP Or address 
server_port = 7000                #  The port number provided by the server 
token = freefrp.net               #  Provided by the server token

[web1_xxxxxx]                     #  To avoid mistakes , It must be changed to a more special name , It can't have the same name as other configuration on the server side .
type = http                       # http agreement 
local_ip = 192.168.1.5            #  Fill in Qunhui intranet IP.
local_port = 80                 #  Qunhui intranet HTTP port , The default is 5000.
custom_domains = *.ioiox.com    #  Fill in your domain name 

[web2_xxxxxx]                     #  To avoid mistakes , It must be changed to a more special name , It can't have the same name as other configuration on the server side .
type = https                      # https agreement 
local_ip = 192.168.1.5            #  Fill in Qunhui intranet IP.
local_port = 443                 #  Qunhui intranet HTTPS port , The default is 5001.
custom_domains = *.ioiox.com    #  Fill in your domain name 

  thus , Configuration complete .

There's still a step to go , It is the intranet penetration service frps Bind to Alibaba cloud domain names , Log in to alicloud to set up , Complete as follows .

  Okay , The necessary preparations have been basically completed , Next, set the reverse proxy in Qunhui .

  Start testing ：

 ok, Perfect operation , No ports .

Conclusion , Do you see the lock sign in front , This indicates that my domain name certificate is also configured （ For details, please refer to the previous articles on the configuration of Pan domain names ）