mirror of
https://github.com/fatedier/frp.git
synced 2026-05-15 08:05:49 -06:00
[GH-ISSUE #806] [安全疑问]FRPC会大量连接其他服务器? #630
Labels
No labels
In Progress
WIP
WaitingForInfo
bug
doc
duplicate
easy
enhancement
future
help wanted
invalid
lifecycle/stale
need-issue-template
need-usage-help
no plan
proposal
pull-request
question
todo
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/frp#630
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @ChenWenBrian on GitHub (Jun 6, 2018).
Original GitHub issue: https://github.com/fatedier/frp/issues/806
Issue is only used for submiting bug report and documents typo. If there are same issues or answers can be found in documents, we will close it directly.
(为了节约时间,提高处理问题的效率,不按照格式填写的 issue 将会直接关闭。)
Use the commands below to provide key information from your environment:
You do NOT have to include this information if this is a FEATURE REQUEST
What version of frp are you using (./frpc -v or ./frps -v)?
frpc 0.19.1
What operating system and processor architecture are you using (
go env)?CentOS 7.2
Configures you used:
IP直接连接frps端,部分端口映射本地服务
Steps to reproduce the issue:
netstat -ntap |grep frpDescribe the results you received:

Describe the results you expected:
有点不明白为什么frpc为什么会连连接大量外网的其他服务器。
通过IP查询,这些IP基本上都是连接到谷歌的服务器
(美国 加利福尼亚州圣克拉拉县山景市谷歌公司)不清楚这里是否有安全隐患,这些连接的目的是什么?
Additional information you deem important (e.g. issue happens only occasionally):
Can you point out what caused this issue (optional)
@vc1 commented on GitHub (Jun 6, 2018):
关注,贴下配置看看吧
@fatedier commented on GitHub (Jun 6, 2018):
不清楚就先自己排查下,抓个包,从最基础的配置开始测试,慢慢来,别急着看到什么就马上提问。
@ChenWenBrian commented on GitHub (Jun 7, 2018):
根据@fatedier大神的建议, 抓了一夜的包(之前Linux没玩过抓包,不要笑哈)。发现全是Chrome连接Google的连接,大部分是已经中断后还没释放的连接
SYN_SENT,只有一个ESTABLISHED还处于活跃状态。配置方面是因为之前在frpc端开启了http_proxy的plugin配置,关闭后就只有跟远端的服务器连接,以及本地端口的映射连接了。结果符合预期,证明frpc还是很安全可靠的。我测试了frpc的本地端口映射配置、http_proxy配置、socks_proxy配置,全部符合预期。测试过程就不贴了,抓包都没入门,就不贻笑大方了,有兴趣的同学可以自己抓包试试各种配置。
@fatedier commented on GitHub (Jun 7, 2018):
👍没接触过的多尝试尝试,以后就熟练了。