[GH-ISSUE #1623] [http.go:95] do http proxy request error: EOF

gitea-mirror commented

2026-05-05 12:49:06 -06:00

Owner

Originally created by @SheldonSir on GitHub (Jan 17, 2020).
Original GitHub issue: https://github.com/fatedier/frp/issues/1623

Issue is only used for submiting bug report and documents typo. If there are same issues or answers can be found in documents, we will close it directly.
(为了节约时间，提高处理问题的效率，不按照格式填写的 issue 将会直接关闭。)
(请不要在 issue 评论中出现无意义的加1，我也是 等内容，将会被直接删除。)
(由于个人精力有限，和系统环境，网络环境等相关的求助问题请转至其他论坛或社交平台。)

Use the commands below to provide key information from your environment:
You do NOT have to include this information if this is a FEATURE REQUEST

What version of frp are you using (./frpc -v or ./frps -v)?
0.31.1

What operating system and processor architecture are you using (go env)?
server : Centos 7
client : Ubuntu 16.04.6 LTS (Xenial Xerus)

Configures you used:

#frps.ini
[common]
bind_port = 8889

vhost_http_port = 8889
vhost_https_port = 9000

dashboard_port = 9001
dashboard_user = sheldon
dashboard_pwd = 749071

#log_file = /conf/frps.log

# render.xxx.com and *.render.xxx.com 已设置解析
subdomain_host = render.xxx.com

# frpc.ini
[common]
server_addr = 47.xxx.xxx.xxx
server_port = 8889
tls_enable = true

[static_file]
type = tcp
remote_port = 9007
plugin = static_file
plugin_local_path = /home/master/frp
plugin_strip_prefix = static
plugin_http_user = sheldon
plugin_http_passwd = sheldon

[web02]
type = http
local_ip = 192.168.51.64 
local_port = 443 
subdomain = notebook

# Apache/2.4.6 (CentOS)  
# notebook.conf
<VirtualHost _default_:80>
	DocumentRoot "/var/www/html"
	ServerName 47.xxx.xxx.xxx
</VirtualHost>

<VirtualHost *:80>

        DocumentRoot "/var/www/render/public"

        ServerName notebook.render.xxx.com

	<IfModule mod_rewrite.c>
        	RewriteEngine on
        	RewriteCond %{SERVER_PORT} 80
        	RewriteRule ^(.*$) https://notebook.render.xxx.com/ [R=301,L]
    	</IfModule>

	RewriteCond %{SERVER_NAME} =notebook.render.xxx.com
	RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]

</VirtualHost>

<VirtualHost _default_:443>
    SSLEngine On
    SSLProtocol All -SSLv2
    SSLCipherSuite HIGH:MEDIUM:!aNULL:+MD5
    DocumentRoot "/var/www/render/public"
    ServerName notebook.render.xxx.com
    <Directory /var/www/render/public/>
    	Options Indexes FollowSymLinks
    	AllowOverride All
    	Require all granted
    </Directory>
    
    #  Apache 反向代理设置 
    ProxyPreserveHost On
    ProxyPass "/" "http://notebook.render.xxx.com:8889/"
    ProxyPassReverse "/" "http://notebook.render.xxx.com:8889/"
 
    Include /etc/letsencrypt/options-ssl-apache.conf
    SSLCertificateFile /etc/letsencrypt/live/notebook.render.xxx.com/cert.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/notebook.render.xxx.com/privkey.pem
    SSLCertificateChainFile /etc/letsencrypt/live/notebook.render.xxx.com/chain.pem
</VirtualHost>

Steps to reproduce the issue:
0. 因为客户端 kubenetes cluster 要求使用https访问, so, 借鉴了文章使用内网穿透给本地项目部署域名跟https 大概思路, 将Nginx替换成Apache, 通过Apache 来转发

Browser  --> Apache --> Frps --> Frpc

systemctl restart httpd.service
在 frp 未开启且 Apache 未开启反向代理前, 测试访问 https://notebook.render.xxx.com 是OK 的
./frps -c frps.ini
./frpc -c frpc.ini
在frp 开启且 Apache 开启反向代理后, 再次访问 https://notebook.render.xxx.com

Describe the results you received:
浏览器显示为:

The page you visit not found.
Sorry, the page you are looking for is currently unavailable.
Please try again later.

The server is powered by frp.

Faithfully yours, frp.

frps 日志显示:

2020/01/17 11:32:19 [I] [proxy.go:92] [11d0a5d9b1deb5fb] [web02] get a new work connection: [222.93.91.241:45312]
2020/01/17 11:32:19 [W] [http.go:95] do http proxy request error: EOF

配置Nginx 也会遇到同样的问题

Describe the results you expected:
我期望的结果应该是正常跳转到我本地 docker 中的 kubenetes cluster 页面(ps: 可以通过 https://192.168.51.64 访问到页面)

Additional information you deem important (e.g. issue happens only occasionally):

Can you point out what caused this issue (optional)

Originally created by @SheldonSir on GitHub (Jan 17, 2020). Original GitHub issue: https://github.com/fatedier/frp/issues/1623 Issue is only used for submiting bug report and documents typo. If there are same issues or answers can be found in documents, we will close it directly. (为了节约时间，提高处理问题的效率，不按照格式填写的 issue 将会直接关闭。) (请不要在 issue 评论中出现无意义的 **加1**，**我也是** 等内容，将会被直接删除。) (由于个人精力有限，和系统环境，网络环境等相关的求助问题请转至其他论坛或社交平台。) Use the commands below to provide key information from your environment: You do NOT have to include this information if this is a FEATURE REQUEST **What version of frp are you using (./frpc -v or ./frps -v)?** **0.31.1** **What operating system and processor architecture are you using (`go env`)?** **server : Centos 7** **client : Ubuntu 16.04.6 LTS (Xenial Xerus)** **Configures you used:** ``` #frps.ini [common] bind_port = 8889 vhost_http_port = 8889 vhost_https_port = 9000 dashboard_port = 9001 dashboard_user = sheldon dashboard_pwd = 749071 #log_file = /conf/frps.log # render.xxx.com and *.render.xxx.com 已设置解析 subdomain_host = render.xxx.com ``` ``` # frpc.ini [common] server_addr = 47.xxx.xxx.xxx server_port = 8889 tls_enable = true [static_file] type = tcp remote_port = 9007 plugin = static_file plugin_local_path = /home/master/frp plugin_strip_prefix = static plugin_http_user = sheldon plugin_http_passwd = sheldon [web02] type = http local_ip = 192.168.51.64 local_port = 443 subdomain = notebook ``` ``` # Apache/2.4.6 (CentOS) # notebook.conf <VirtualHost _default_:80> DocumentRoot "/var/www/html" ServerName 47.xxx.xxx.xxx </VirtualHost> <VirtualHost *:80> DocumentRoot "/var/www/render/public" ServerName notebook.render.xxx.com <IfModule mod_rewrite.c> RewriteEngine on RewriteCond %{SERVER_PORT} 80 RewriteRule ^(.*$) https://notebook.render.xxx.com/ [R=301,L] </IfModule> RewriteCond %{SERVER_NAME} =notebook.render.xxx.com RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent] </VirtualHost> <VirtualHost _default_:443> SSLEngine On SSLProtocol All -SSLv2 SSLCipherSuite HIGH:MEDIUM:!aNULL:+MD5 DocumentRoot "/var/www/render/public" ServerName notebook.render.xxx.com <Directory /var/www/render/public/> Options Indexes FollowSymLinks AllowOverride All Require all granted </Directory> # Apache 反向代理设置 ProxyPreserveHost On ProxyPass "/" "http://notebook.render.xxx.com:8889/" ProxyPassReverse "/" "http://notebook.render.xxx.com:8889/" Include /etc/letsencrypt/options-ssl-apache.conf SSLCertificateFile /etc/letsencrypt/live/notebook.render.xxx.com/cert.pem SSLCertificateKeyFile /etc/letsencrypt/live/notebook.render.xxx.com/privkey.pem SSLCertificateChainFile /etc/letsencrypt/live/notebook.render.xxx.com/chain.pem </VirtualHost> ``` **Steps to reproduce the issue:** 0. 因为客户端 **kubenetes cluster** 要求使用https访问, so, 借鉴了文章 [使用内网穿透给本地项目部署域名跟https](https://juejin.im/post/5d6f5f1ef265da03bc12977a) 大概思路, 将Nginx替换成Apache, 通过Apache 来转发 ```flow Browser --> Apache --> Frps --> Frpc ``` 1. systemctl restart httpd.service 2. 在 frp 未开启且 Apache 未开启反向代理前, 测试访问 https://notebook.render.xxx.com 是OK 的 3. ./frps -c frps.ini 4. ./frpc -c frpc.ini 5. 在frp 开启且 Apache 开启反向代理后, 再次访问 https://notebook.render.xxx.com **Describe the results you received:** 浏览器显示为: ``` The page you visit not found. Sorry, the page you are looking for is currently unavailable. Please try again later. The server is powered by frp. Faithfully yours, frp. ``` frps 日志显示: ``` 2020/01/17 11:32:19 [I] [proxy.go:92] [11d0a5d9b1deb5fb] [web02] get a new work connection: [222.93.91.241:45312] 2020/01/17 11:32:19 [W] [http.go:95] do http proxy request error: EOF ``` 配置Nginx 也会遇到同样的问题 **Describe the results you expected:** 我期望的结果应该是正常跳转到我本地 docker 中的 kubenetes cluster 页面(ps: 可以通过 https://192.168.51.64 访问到页面) **Additional information you deem important (e.g. issue happens only occasionally):** **Can you point out what caused this issue (optional)**

gitea-mirror closed this issue

2026-05-05 12:49:07 -06:00

gitea-mirror commented

2026-05-05 12:49:09 -06:00

Author

Owner

@DaPoHou commented on GitHub (Jan 17, 2020):

直接使用https反代http就行了。没必要那么复杂吧。

@DaPoHou commented on GitHub (Jan 17, 2020): 直接使用https反代http就行了。没必要那么复杂吧。

gitea-mirror commented

2026-05-05 12:49:10 -06:00

Author

Owner

@SheldonSir commented on GitHub (Jan 17, 2020):

直接使用https反代http就行了。没必要那么复杂吧。

抱歉, 没get到你的意思
你是想说用 http2https plugin 吗?

@SheldonSir commented on GitHub (Jan 17, 2020): > 直接使用https反代http就行了。没必要那么复杂吧。抱歉, 没get到你的意思你是想说用 http2https plugin 吗?

gitea-mirror commented

2026-05-05 12:49:11 -06:00

Author

Owner

@DaPoHou commented on GitHub (Jan 18, 2020):

直接使用https反代http就行了。没必要那么复杂吧。

抱歉, 没get到你的意思
你是想说用 http2https plugin 吗?

直接用nginx 443 反代 http 80网站

@DaPoHou commented on GitHub (Jan 18, 2020): > > 直接使用https反代http就行了。没必要那么复杂吧。 > > 抱歉, 没get到你的意思 > 你是想说用 http2https plugin 吗? 直接用nginx 443 反代 http 80网站

gitea-mirror commented

2026-05-05 12:49:12 -06:00

Author

Owner

@SheldonSir commented on GitHub (Jan 19, 2020):

直接使用https反代http就行了。没必要那么复杂吧。

抱歉, 没get到你的意思
你是想说用 http2https plugin 吗?

直接用nginx 443 反代 http 80网站

我原有公网server中用Apache 已经在跑多个站点, so 我就不需要nginx 再做反向代理了. 况且 Apache 也可以做反向代理server

我重新update issue了, 上面的配置我在本地用 phpStudy 搭了一个简易网站, 测试是可以正常访问的

问题frpc 主机环境描述:
Ubuntu 16.04.6 LTS
Kubenetes cluster in Docker
docker pods 对外映射 443 and 31390 port

需要通过frpc 将访问传给 docker 中的 Kubenetes cluster

that's all

@SheldonSir commented on GitHub (Jan 19, 2020): > > > 直接使用https反代http就行了。没必要那么复杂吧。 > > > > > > 抱歉, 没get到你的意思 > > 你是想说用 http2https plugin 吗? > > 直接用nginx 443 反代 http 80网站我原有公网server中用Apache 已经在跑多个站点, so 我就不需要nginx 再做反向代理了. 况且 Apache 也可以做反向代理server 我重新update issue了, 上面的配置我在本地用 phpStudy 搭了一个简易网站, 测试是可以正常访问的 ---- 问题frpc 主机环境描述: Ubuntu 16.04.6 LTS Kubenetes cluster in Docker docker pods 对外映射 443 and 31390 port 需要通过frpc 将访问传给 docker 中的 Kubenetes cluster that's all

gitea-mirror commented

2026-05-05 12:49:13 -06:00

Author

Owner

@SheldonSir commented on GitHub (Jan 29, 2020):

OK, 我最后的解决方法是将

SSLCertificateKeyFile /etc/letsencrypt/live/notebook.render.xxx.com/privkey.pem
SSLCertificateChainFile /etc/letsencrypt/live/notebook.render.xxx.com/chain.pem

两个证书内容通过base64加密后, 手动拷贝替换了 Kubenetes 内部的web证书(记得备份), 在frps server 端不做Apache 转发

Browser --> Frps --> Frpc --> Kubenetes

以上方法动到了 Kubenetes 内部, 不算是很好的解决方案. 如果大家有好方法, 欢迎follow

@SheldonSir commented on GitHub (Jan 29, 2020): OK, 我最后的解决方法是将 ``` SSLCertificateKeyFile /etc/letsencrypt/live/notebook.render.xxx.com/privkey.pem SSLCertificateChainFile /etc/letsencrypt/live/notebook.render.xxx.com/chain.pem ``` 两个证书内容通过base64加密后, 手动拷贝替换了 Kubenetes 内部的web证书(**记得备份**), 在frps server 端不做Apache 转发 > Browser --> Frps --> Frpc --> Kubenetes 以上方法动到了 Kubenetes 内部, 不算是很好的解决方案. 如果大家有好方法, 欢迎follow

gitea-mirror commented

2026-05-05 12:49:14 -06:00

Author

Owner

@fatedier commented on GitHub (Feb 4, 2020):

你要反代 https 的服务，为什么 type 填的是 http? 直接用 tcp 端口映射不可以吗？

@fatedier commented on GitHub (Feb 4, 2020): 你要反代 https 的服务，为什么 type 填的是 http? 直接用 tcp 端口映射不可以吗？

Rows
Columns

[GH-ISSUE #1623] [http.go:95] do http proxy request error: EOF #1282