[GH-ISSUE #2662] [Feature Request] TCP Port Multiplexing using TLS SNI #2124

Closed
opened 2026-05-05 13:21:50 -06:00 by gitea-mirror · 8 comments
Owner

Originally created by @rucciva on GitHub (Nov 17, 2021).
Original GitHub issue: https://github.com/fatedier/frp/issues/2662

Describe the feature request

For forwarding TLS trafic to one of multiple connected service based on the domain name on the SNI without doing TLS termination on frps.

Describe alternatives you've considered

No response

Affected area

  • Docs
  • Installation
  • Performance and Scalability
  • Security
  • User Experience
  • Test and Release
  • Developer Infrastructure
  • Client Plugin
  • Server Plugin
  • Extensions
  • Others
Originally created by @rucciva on GitHub (Nov 17, 2021). Original GitHub issue: https://github.com/fatedier/frp/issues/2662 ### Describe the feature request For forwarding TLS trafic to one of multiple connected service based on the domain name on the SNI without doing TLS termination on frps. ### Describe alternatives you've considered _No response_ ### Affected area - [ ] Docs - [ ] Installation - [ ] Performance and Scalability - [ ] Security - [ ] User Experience - [ ] Test and Release - [ ] Developer Infrastructure - [ ] Client Plugin - [X] Server Plugin - [ ] Extensions - [ ] Others
gitea-mirror 2026-05-05 13:21:50 -06:00
Author
Owner

@github-actions[bot] commented on GitHub (Dec 18, 2021):

Issues go stale after 30d of inactivity. Stale issues rot after an additional 7d of inactivity and eventually close.

<!-- gh-comment-id:997107232 --> @github-actions[bot] commented on GitHub (Dec 18, 2021): Issues go stale after 30d of inactivity. Stale issues rot after an additional 7d of inactivity and eventually close.
Author
Owner

@fatedier commented on GitHub (Dec 18, 2021):

Just use https proxy.

<!-- gh-comment-id:997142946 --> @fatedier commented on GitHub (Dec 18, 2021): Just use https proxy.
Author
Owner

@rucciva commented on GitHub (Dec 24, 2021):

Just use https proxy.

Yes, that will work, but it will require https termination in the remote server.

If frps could multiplex based on SNI, It could helps some users that have high concerns for privacy while at the same time helps in saving some bucks by avoiding to need to buy additional Public IP if they choose to for example use port 443 for all of their service which might be deployed in more than one unexposed private machine.

<!-- gh-comment-id:1000650562 --> @rucciva commented on GitHub (Dec 24, 2021): > Just use https proxy. Yes, that will work, but it will require https termination in the remote server. If frps could multiplex based on SNI, It could helps some users that have high concerns for privacy while at the same time helps in saving some bucks by avoiding to need to buy additional Public IP if they choose to for example use port 443 for all of their service which might be deployed in more than one unexposed private machine.
Author
Owner

@fatedier commented on GitHub (Dec 24, 2021):

https proxy in frp is just a sni proxy. It will only read servername and passthrough traffic to your client.

<!-- gh-comment-id:1000654828 --> @fatedier commented on GitHub (Dec 24, 2021): https proxy in frp is just a sni proxy. It will only read servername and passthrough traffic to your client.
Author
Owner

@rucciva commented on GitHub (Dec 24, 2021):

oh you mean vhost_https_port ? i was thinking about deploying https proxy in front of frps.

let me check first

<!-- gh-comment-id:1000659402 --> @rucciva commented on GitHub (Dec 24, 2021): oh you mean `vhost_https_port` ? i was thinking about deploying https proxy in front of frps. let me check first
Author
Owner

@rucciva commented on GitHub (Dec 24, 2021):

oh by the way, how do you specify multiple domains in custom_domains ? is it comma separated?

<!-- gh-comment-id:1000659644 --> @rucciva commented on GitHub (Dec 24, 2021): oh by the way, how do you specify multiple domains in `custom_domains` ? is it comma separated?
Author
Owner

@fatedier commented on GitHub (Dec 24, 2021):

oh by the way, how do you specify multiple domains in custom_domains ? is it comma separated?

Yes.

<!-- gh-comment-id:1000672458 --> @fatedier commented on GitHub (Dec 24, 2021): > oh by the way, how do you specify multiple domains in `custom_domains` ? is it comma separated? Yes.
Author
Owner

@rucciva commented on GitHub (Dec 24, 2021):

yup, its working. thank you very much

<!-- gh-comment-id:1000685377 --> @rucciva commented on GitHub (Dec 24, 2021): yup, its working. thank you very much
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/frp#2124
No description provided.