[GH-ISSUE #3674] [Feature Request] frp 安全方面的一个问题 #2923

Closed
opened 2026-05-05 13:53:25 -06:00 by gitea-mirror · 8 comments
Owner

Originally created by @soonxf on GitHub (Oct 14, 2023).
Original GitHub issue: https://github.com/fatedier/frp/issues/3674

Describe the feature request

frp 服务端 是否能解析 frpc客户端 传来的流量,这里的解析指的是,将这些流量解析成明文,主要是针对市面上一些免费的 frpc 代理产生了安全性的顾虑

Describe alternatives you've considered

不使用免费的 frpc

Affected area

  • Docs
  • Installation
  • Performance and Scalability
  • Security
  • User Experience
  • Test and Release
  • Developer Infrastructure
  • Client Plugin
  • Server Plugin
  • Extensions
  • Others
Originally created by @soonxf on GitHub (Oct 14, 2023). Original GitHub issue: https://github.com/fatedier/frp/issues/3674 ### Describe the feature request frp 服务端 是否能解析 frpc客户端 传来的流量,这里的解析指的是,将这些流量解析成明文,主要是针对市面上一些免费的 frpc 代理产生了安全性的顾虑 ### Describe alternatives you've considered 不使用免费的 frpc ### Affected area - [ ] Docs - [ ] Installation - [ ] Performance and Scalability - [X] Security - [ ] User Experience - [ ] Test and Release - [ ] Developer Infrastructure - [ ] Client Plugin - [ ] Server Plugin - [ ] Extensions - [ ] Others
gitea-mirror 2026-05-05 13:53:25 -06:00
Author
Owner

@soonxf commented on GitHub (Oct 14, 2023):

主要担心的是使用 如 樱花Frp 会不会造成信息泄露的风险,或者有没有什么方法避免这个风险

<!-- gh-comment-id:1762597006 --> @soonxf commented on GitHub (Oct 14, 2023): 主要担心的是使用 如 樱花Frp 会不会造成信息泄露的风险,或者有没有什么方法避免这个风险
Author
Owner

@xqzr commented on GitHub (Oct 14, 2023):

{
 "type": "https"
}
<!-- gh-comment-id:1762663738 --> @xqzr commented on GitHub (Oct 14, 2023): ```json { "type": "https" } ```
Author
Owner

@penndu commented on GitHub (Oct 15, 2023):

transport.useEncryption = true

<!-- gh-comment-id:1763330365 --> @penndu commented on GitHub (Oct 15, 2023): `transport.useEncryption = true`
Author
Owner

@xqzr commented on GitHub (Oct 15, 2023):

transport.useEncryption = true

这将在 frps 解密

<!-- gh-comment-id:1763366992 --> @xqzr commented on GitHub (Oct 15, 2023): > `transport.useEncryption = true` 这将在 frps 解密
Author
Owner

@fatedier commented on GitHub (Oct 16, 2023):

一般来说,两端都是你自己的服务,中间应用层自己把加密做好,否则在互联网上传输的流量,都没法保证。

<!-- gh-comment-id:1763663844 --> @fatedier commented on GitHub (Oct 16, 2023): 一般来说,两端都是你自己的服务,中间应用层自己把加密做好,否则在互联网上传输的流量,都没法保证。
Author
Owner

@KennanChan commented on GitHub (Oct 18, 2023):

FRPS服务器上部署一套VPN(我用的Softether VPN),网关对外只开放FPRS的注册端口,真正的映射端口只有连上VPN进入内网才能访问

<!-- gh-comment-id:1767447533 --> @KennanChan commented on GitHub (Oct 18, 2023): FRPS服务器上部署一套VPN(我用的Softether VPN),网关对外只开放FPRS的注册端口,真正的映射端口只有连上VPN进入内网才能访问
Author
Owner

@Guation commented on GitHub (Oct 24, 2023):

你从ftpc进的流量是什么样的从frps出的流量就是什么样的 反过来也是 这是端口映射服务特性决定的 你只能自行将输入的流量加密以达到避免明文传输的目的

<!-- gh-comment-id:1776534277 --> @Guation commented on GitHub (Oct 24, 2023): 你从ftpc进的流量是什么样的从frps出的流量就是什么样的 反过来也是 这是端口映射服务特性决定的 你只能自行将输入的流量加密以达到避免明文传输的目的
Author
Owner

@github-actions[bot] commented on GitHub (Nov 24, 2023):

Issues go stale after 30d of inactivity. Stale issues rot after an additional 7d of inactivity and eventually close.

<!-- gh-comment-id:1825022114 --> @github-actions[bot] commented on GitHub (Nov 24, 2023): Issues go stale after 30d of inactivity. Stale issues rot after an additional 7d of inactivity and eventually close.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/frp#2923
No description provided.