{"id":41,"date":"2025-12-18T19:24:58","date_gmt":"2025-12-18T11:24:58","guid":{"rendered":"https:\/\/blog.lyx.cool\/?p=41"},"modified":"2025-12-18T20:09:52","modified_gmt":"2025-12-18T12:09:52","slug":"rathole%e5%86%85%e7%bd%91%e7%a9%bf%e9%80%8f-noise%e5%8a%a0%e5%af%86%e9%aa%8c%e8%af%81","status":"publish","type":"post","link":"https:\/\/blog.lyx.cool\/?p=41","title":{"rendered":"rathole\u5185\u7f51\u7a7f\u900f&amp; \u6d41\u91cf\u52a0\u5bc6"},"content":{"rendered":"\n<h4 class=\"wp-block-heading\">\u914d\u7f6e\u6982\u89c8\uff1a<\/h4>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-c8156410 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:100%\">\n<ul class=\"wp-block-list\">\n<li class=\"has-source-serif-pro-font-family\">\u963f\u91cc\u4e91\u670d\u52a1\u5668\uff08\u8df3\u677f\u673a\uff09\uff1a<br>Linux daxue 6.1.0-41-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.158-1 (2025-11-09) x86_64 GNU\/Linux<\/li>\n\n\n\n<li class=\"has-source-serif-pro-font-family\">\u5185\u7f51\u670d\u52a1\u5668\uff1a<br>Linux workstation 6.8.0-84-generic #84~22.04.1-Ubuntu SMP PREEMPT_DYNAMIC Tue Sep&nbsp; 9 14:29:36 UTC 2 x86_64 x86_64 x86_64 GNU\/Linux<\/li>\n<\/ul>\n<\/div>\n<\/div>\n\n\n\n<h4 class=\"wp-block-heading has-system-font-font-family\"><strong> rathole\u5185\u7f51\u7a7f\u900f\u57fa\u7840\u914d\u7f6e<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">\u53c2\u8003\u94fe\u63a5\uff1a<a href=\"https:\/\/github.com\/rathole-org\/rathole\/\">https:\/\/github.com\/rathole-org\/rathole\/<\/a><\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>\u4e24\u4e2a\u670d\u52a1\u5668\u90fd\u8981\u505a\u7684<\/li>\n<\/ol>\n\n\n\n<pre class=\"wp-block-code\"><code>\/\/\u521b\u5efa\u4e00\u4e2arathole\u76ee\u5f55\nmkdir rathole-file\n\/\/\u5b89\u88c5\u5bf9\u5e94\u7248\u672c\u6587\u4ef6\nwget https:\/\/github.com\/zhzyker\/dismap\/releases\/download\/v0.4\/dismap-0.4-linux-amd64\n\/\/\u89e3\u538b\u6587\u4ef6\n unzip rathole-x86_64-unknown-linux-gnu.zip<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">2.\u8df3\u677f\u673a\u914d\u7f6e\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>vi server.toml\n\n# server.toml\n&#91;server]\nbind_addr = \"0.0.0.0:2333\" #\u8df3\u677f\u673a\u76d1\u542c\u5ba2\u6237\u7aef\u8fde\u63a5\u7684\u7aef\u53e3\ndefault_token=\"yourtoken\"#\u4e0e\u5ba2\u6237\u7aef\u5fc5\u987b\u4e00\u81f4\n\n&#91;server.services.my_nas_ssh]\nbind_addr = \"0.0.0.0:5200\" # `5200` \u914d\u7f6e\u4e86\u5c06 `my_nas_ssh` \u66b4\u9732\u7ed9\u4e92\u8054\u7f51\u7684\u7aef\u53e3\n\npkill rathole\n.\/rathole server.toml<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">3.\u5185\u7f51\u670d\u52a1\u5668\u914d\u7f6e\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>vi client.toml\n\n\u914d\u7f6e\uff1a\n#client.toml\n&#91;client]\nremote_addr = \"myserver.com:2333\" # myserver.com\u662f\u670d\u52a1\u5668\u7684\u5730\u5740\uff0c\u7aef\u53e3\u5fc5\u987b\u4e0e\u8df3\u677f\u673a\u76d1\u542c\u7aef\u53e3\u76f8\u540c\n\n&#91;client.services.my_nas_ssh]\ntoken = \"yourtoken\" # \u4e0e\u8df3\u677f\u673a\u4e00\u81f4\nlocal_addr = \"127.0.0.1:22\" # \u9700\u8981\u88ab\u8f6c\u53d1\u7684\u670d\u52a1\u7684\u5730\u5740\n\npkill rathole\n.\/rathole client.toml<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u2b50\ufe0f 4. \u963f\u91cc\u4e91\u8df3\u677f\u673a\u7ed9 2333\u7aef\u53e3 \u548c 5200\u7aef\u53e3 \u653e\u884c<\/strong><\/p>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<ol class=\"wp-block-list\">\n<li>\u767b\u5f55 \u963f\u91cc\u4e91\u63a7\u5236\u53f0<\/li>\n\n\n\n<li>\u627e\u5230\u4f60\u7684 ECS \u5b9e\u4f8b\uff08IP\uff09<\/li>\n\n\n\n<li>\u70b9\u51fb\u300c\u5b89\u5168\u7ec4\u300d\u2192\u300c\u914d\u7f6e\u89c4\u5219\u300d<\/li>\n\n\n\n<li>\u5728 \u5165\u65b9\u5411\uff08Inbound\uff09 \u6dfb\u52a0\u89c4\u5219\uff1a<\/li>\n<\/ol>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u6388\u6743\u7b56\u7565\uff1a\u5141\u8bb8 <\/li>\n\n\n\n<li>\u534f\u8bae\u7c7b\u578b\uff1a\u81ea\u5b9a\u4e49 TCP <\/li>\n\n\n\n<li>\u7aef\u53e3\u8303\u56f4\uff1a2333 <\/li>\n\n\n\n<li>\u6388\u6743\u5bf9\u8c61\uff1a0.0.0.0\/0 \uff08\u6216\u4f60\u7684\u5ba2\u6237\u7aef\u516c\u7f51 IP\uff09<\/li>\n<\/ul>\n<\/blockquote>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">5. \u9a8c\u8bc1\u8fde\u63a5<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ssh -p5200 yourname@106.14.1.17\n\/\/106.14.1.17\u4e3a\u8df3\u677f\u673aIP<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><strong> <strong>\u65ad\u8fde\u7acb\u523b\u91cd\u8bd5\uff0c\u5f00\u673a\u81ea\u52a8\u8fd0\u884c<\/strong><\/strong><\/h4>\n\n\n\n<ol class=\"wp-block-list\">\n<li class=\"has-medium-font-size\">\u521b\u5efa systemd \u670d\u52a1\u6587\u4ef6<\/li>\n<\/ol>\n\n\n\n<pre class=\"wp-block-code\"><code>cd \/etc\/systemd\/system\/\n#\u8df3\u677f\u673a\u4e0a\nvi rathole-server.server\n#\u5185\u7f51\u670d\u52a1\u5668\u4e0a\nvi rathole-client.server<\/code><\/pre>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"> 2. rathole.server \u914d\u7f6e\uff08\u5185\u7f51\u670d\u52a1\u5668\u4e0a\u540c\u6837\u914d\u7f6e\uff0c\u53easerver.toml -&gt; client.toml\uff09<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>&#91;Unit]\nDescription=Rathole Service\n\nAfter=network.target\n\n&#91;Service]\n#rathole\u7684\u5730\u5740\u548cserver.toml\u7684\u5730\u5740\nExecStart=\/root\/rathole_file\/rathole \/root\/rathole_file\/server.toml\n\nRestart=always  # \u2190 \u5173\u952e\uff1a\u603b\u662f\u91cd\u542f\n\nRestartSec=5s # \u2190 \u65ad\u8fde\u540e 5 \u79d2\u91cd\u8bd5\n\nStartLimitInterval=60s &nbsp; # \u5728 60 \u79d2\u5185\n\nStartLimitBurst=10 &nbsp; &nbsp; &nbsp; # \u6700\u591a\u91cd\u542f 10 \u6b21\uff0c\u9632\u6b62\u65e5\u5fd7\u5237\u7206&nbsp;\n\nUser=root\n\n&#91;Install]\n\nWantedBy=multi-user.target<\/code><\/pre>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\">3. \u542f\u7528\u5e76\u542f\u52a8\u670d\u52a1<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code># \u91cd\u8f7d systemd \u914d\u7f6e \nsudo systemctl daemon-reload\n# \u542f\u7528\u5f00\u673a\u81ea\u542f \nsudo systemctl enable rathole-server  # server \u7aef \nsudo systemctl enable rathole-client  # client \u7aef \n# \u7acb\u5373\u542f\u52a8 \nsudo systemctl start rathole-server \nsudo systemctl start rathole-client<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">4. \u9a8c\u8bc1\u72b6\u6001<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code># \u67e5\u770b\u65e5\u5fd7\uff08\u5b9e\u65f6\uff09 \nsudo journalctl -u rathole-client -f \n# \u67e5\u770b\u72b6\u6001 \nsystemctl status rathole-client<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>\u6d41\u91cf\u52a0\u5bc6<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">\u53c2\u8003\u94fe\u63a5\uff1a<a href=\"https:\/\/github.com\/rathole-org\/rathole\/blob\/main\/docs\/transport.md\">https:\/\/github.com\/rathole-org\/rathole\/blob\/main\/docs\/transport.md<\/a><\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"has-large-font-size wp-block-paragraph\"><strong>\u6700\u7b80\u5355\u65b9\u5f0f\uff1a<\/strong>\u4f7f\u7528rathole\u63d0\u4f9b\u7684noise\u65b9\u6cd5<\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">1. \u751f\u6210\u5bc6\u94a5\u5bf9\uff08\u8bb0\u4f4fPrivate Key &amp; Public Key\uff09<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>rathole --genkey<\/code><\/pre>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\">2. \u8df3\u677f\u673aserver.toml\u914d\u7f6e\u3010Private Key\u3011<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code># server.toml\n&#91;server]\nbind_addr = \"0.0.0.0:2333\"\ndefault_token = \"yourtoken\"\n\n&#91;server.transport]\ntype = \"noise\"\n\n&#91;server.transport.noise]\nlocal_private_key = \"yourprivatekey\"\n\n&#91;server.services.my_nas_ssh]\nbind_addr = \"0.0.0.0:5200\" <\/code><\/pre>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\">3. \u5185\u7f51client.toml\u914d\u7f6e\u3010Public Key\u3011<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code># client.toml\n&#91;client]\nremote_addr = \"myserver.com:2333\"\ndefault_token = \"yourtoken\"\n\n&#91;client.transport]\ntype = \"noise\"\n\n&#91;client.transport.noise]\nremote_public_key = \"yourpublickey\"\n\n&#91;client.services.my_nas_ssh]\nlocal_addr = \"127.0.0.1:22\" # \u5185\u7f51\u4e2d\u771f\u6b63\u63d0\u4f9b\u670d\u52a1\u7684\u5730\u5740<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">4. \u9a8c\u8bc1\u8fde\u63a5\uff08\u540c\u4e0a\uff09<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"has-large-font-size wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#cf2e2e\" class=\"has-inline-color\">\u6293\u5305\u9a8c\u8bc1<\/mark><\/strong><\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">\u6293\u5305\uff1atcpdump;    \u5305\u5206\u6790\uff1awireshark<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u56e0\u8981\u9a8c\u8bc1\u6d41\u91cf\u662f\u5426\u52a0\u5bc6\u6210\u529f\uff0c\u5e94\u5728\u8df3\u677f\u673a\u4e0a\u8fdb\u884c\u6293\u5305\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>#\u7aef\u53e3\u4e3a\u8df3\u677f\u673aserver\u76d1\u542c\u5185\u7f51\u670d\u52a1\u5668client\u7684\u7aef\u53e3\u53f7\nsudo tcpdump -i any -w noise.pcap 'port 2333'<\/code><\/pre>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><mark style=\"background-color:rgba(0, 0, 0, 0);color:#f78da7\" class=\"has-inline-color\"><strong>\uff01\u6ce8\u610f<\/strong>\uff1a<\/mark>\u5e94\u5728server\u548cclient\u5efa\u7acb\u8fde\u63a5\u4e4b\u524d\u5c31\u5f00\u59cb\u6293\u5305\uff0c\u5728ssh\u8fde\u63a5\u5185\u7f51\u670d\u52a1\u5668\u6210\u529f\u4e4b\u540e\u505c\u6b62\u6293\u5305\uff08\u56e0\u4e3aSSH \u670d\u52a1\u4f1a\u66b4\u9732\u7248\u672c\uff0c\u5f00\u5934\u670d\u52a1\u5668\u4f1a\u53d1\u7248\u672c\u53f7\uff0c\u6240\u4ee5\u5f97\u5728ssh\u8fde\u63a5\u4e4b\u524d\u5c31\u6293\u5305\uff09\u3002\u8fc7\u7a0b\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">\u6293\u5305 \u2014\u2014 server\u548cclient\u5efa\u7acb\u8fde\u63a5 \u2014\u2014 ssh\u8fde\u63a5\u5185\u7f51\u670d\u52a1\u5668 \u2014\u2014 \u505c\u6b62\u6293\u5305<\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u5c06\u8df3\u677f\u673a\u4e0a\u7684noise.pcap\u5305\u4e0b\u8f7d\u5230\u672c\u5730\u7535\u8111\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>scp root@106.14.1.17:\/root\/path\/noise.pcap ~\/noise.pcap<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Wireshark \u6253\u5f00noise.pcap\u5305\uff0c\u627e\u4e00\u4e2a&nbsp;\u5e26\u6709<code>[PSH, ACK]<\/code>\u6807\u5fd7\u7684\u5305\uff08\u8868\u793a\u6709\u5b9e\u9645\u6570\u636e\uff09\uff0c\u67e5\u770b \u201cPacket Details\u201d \u9762\u677f\u6700\u540e\u4e00\u884c\u4e4b\u540e\u7684\u5185\u5bb9 \u2014\u2014 \u5982\u679c\u6709 \u201cData\u201d \u6216 \u201cUnreassembled Fragment\u201d\uff0c\u5c31\u70b9\u5f00\u5b83\u3002<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u660e\u6587\u6d41\u91cf\uff1a\u53f3\u4fa7\u80fd\u770b\u5230&nbsp;<code>SSH-2.0-OpenSSH_8.9<\/code>\uff08\u7248\u672c\u53f7\uff09<\/li>\n\n\n\n<li>\u52a0\u5bc6\u6d41\u91cf\uff1a\u53f3\u4fa7\uff1aASCII \u5c1d\u8bd5\u89e3\u7801\uff08\u5927\u90e8\u5206\u662f&nbsp;<code>.<\/code>\uff0c\u56e0\u4e3a\u4e0d\u53ef\u6253\u5370\uff09<\/li>\n\n\n\n<li>\u76f4\u63a5\u641c\u7d22SSH \u5173\u952e\u5b57\uff0c\u82e5\u52a0\u5bc6\u6210\u529f\uff0c\u5219\u65e0\u6cd5\u641c\u7d22\u3002<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u56fe\u7247\u53c2\u8003\uff1a<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"2768\" height=\"1476\" src=\"https:\/\/blog.lyx.cool\/wp-content\/uploads\/2025\/12\/0265FF112FD0ECD6F7AD27989E84746C.jpg\" alt=\"\" class=\"wp-image-42\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>TLS + \u57df\u540d\u4f2a\u88c5\u2014\u2014\u5931\u8d25\u7684\u5c1d\u8bd5<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u76ee\u7684\uff1a\u8ba9 rathole \u6d41\u91cf\u770b\u8d77\u6765\u50cf\u6807\u51c6 HTTPS \u6d41\u91cf\uff08\u7aef\u53e3 443 + \u6709\u6548\u8bc1\u4e66 + \u57df\u540d\uff09\uff0c\u4ece\u800c\u7ed5\u8fc7\u6d41\u91cf\u68c0\u6d4b<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-foreground-color\">\u524d\u63d0\u6761\u4ef6\uff1a<\/mark><\/strong><\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#cf2e2e\" class=\"has-inline-color\">\u5df2\u5907\u6848<\/mark><\/strong>\u57df\u540d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u670d\u52a1\u5668\u5f00\u653e\u00a080 \u548c 443 \u7aef\u53e3<\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">1. DNS\u89e3\u6790\uff1a\u57df\u540d\u7684 A \u8bb0\u5f55\u6307\u5411\u670d\u52a1\u5668\u516c\u7f51 IP\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">2. \u5728\u670d\u52a1\u5668\u4e0a\u7533\u8bf7 Let&#8217;s Encrypt \u8bc1\u4e66\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>#\u5b89\u88c5 Certbot\nsudo apt update\nsudo apt install -y certbot\n# \u7533\u8bf7\u8bc1\u4e66\uff08\u786e\u4fdd 80 \u7aef\u53e3\u672a\u88ab\u5360\u7528\uff09\nDOMAIN=\"your-domain.com\"\nsudo certbot certonly --standalone -d $DOMAIN --non-interactive --agree-tos --email your@email.com<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">3. \u8bc1\u4e66\u4f4d\u7f6e<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\u8bc1\u4e66\u94fe\uff1a<span style=\"background-color: initial; font-family: inherit; text-align: initial;\">\/etc\/letsencrypt\/live\/$DOMAIN\/fullchain.pem<\/span>\n\u79c1\u94a5\uff1a\/etc\/letsencrypt\/live\/$DOMAIN\/privkey.pem<\/code><\/pre>\n\n\n\n<p class=\"has-large-font-size wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#cf2e2e\" class=\"has-inline-color\">4. \u542f\u7528 TLS + 443 \u7aef\u53e3<\/mark><\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u2460 AI\u3010\u901a\u4e49\u5343\u95ee\u3001gimini3pro\u3011\u5bf9type=&#8221;tls&#8221;\u4f1a\u63d0\u793a\u62a5\u9519\uff0c\u5e94\u9605\u8bfbrathole\u6587\u6863<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"288\" height=\"88\" src=\"https:\/\/blog.lyx.cool\/wp-content\/uploads\/2025\/12\/F3F374505880C78939B4C81DF4CA3122.png\" alt=\"\" class=\"wp-image-45\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u53c2\u8003\u94fe\u63a5\uff1a<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/github.com\/rathole-org\/rathole\/blob\/main\/examples\/tls\/server.toml\">https:\/\/github.com\/rathole-org\/rathole\/blob\/main\/examples\/tls\/server.toml<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u2461\u00a0PKCS#12 \u8bc1\u4e66\u683c\u5f0f\u517c\u5bb9\u6027\u95ee\u9898\u00a0<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Rathole \u4f7f\u7528\u7684 Rustls \u5e93\u5bf9\u5b89\u5168\u6027\u8981\u6c42\u5f88\u9ad8\uff0c\u53ef\u80fd\u4e0d\u652f\u6301 OpenSSL \u9ed8\u8ba4\u7684\u65e7\u7b97\u6cd5\uff08RC2\uff09\u6216\u67d0\u4e9b\u65b0\u7b97\u6cd5\uff08PBES2\uff09\uff0c\u5728<strong>\u670d\u52a1\u7aef<\/strong>\u5f3a\u5236\u4f7f\u7528\u00a0<strong>AES-256<\/strong>\u00a0\u7b97\u6cd5\uff0c\u8fd9\u662f\u73b0\u4ee3 Rust \u7a0b\u5e8f\u652f\u6301\u6700\u597d\u7684\u683c\u5f0f\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>#\u8fdb\u5165\u8bc1\u4e66\u6e90\u76ee\u5f55 \ncd \/etc\/letsencrypt\/live\/<span style=\"background-color: initial; font-family: inherit; text-align: initial;\">$DOMAIN<\/span>\/\n\n# \u751f\u6210 AES-256 \u8bc1\u4e66 (Rathole \u7684\u6700\u7231)\nopenssl pkcs12 -export \\\n  -in fullchain.pem \\\n  -inkey privkey.pem \\\n  -out \/root\/rathole.p12 \\\n  -passout pass:123456 \\\n  -keypbe AES-256-CBC \\\n  -certpbe AES-256-CBC \\\n  -macalg SHA256\n\n#\u79fb\u52a8\u5230\u4f60\u7684\u5de5\u4f5c\u76ee\u5f55 (\u5047\u8bbe\u662f \/home\/daxue\/rathole_file\/)\ncp \/root\/rathole.p12 \/home\/daxue\/rathole_file\/rathole.p12\nchown daxue:daxue \/home\/daxue\/rathole_file\/rathole.p12\nchmod 644 \/home\/daxue\/rathole_file\/rathole.p12<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u6b64\u65f6\uff0crathole-file\u6587\u4ef6\u4e0b\u4e5f\u6709rathole.p12\u6587\u4ef6\uff08\u907f\u514d\u5728 \/etc \u6587\u4ef6\u4e0b\u7684\u6743\u9650\u95ee\u9898\uff09\uff0c\u670d\u52a1\u5668\u7684server.toml\u914d\u7f6e\u4e3a\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>#server.toml\n&#91;server]\nbind_addr = \"0.0.0.0:443\"\ndefault_token = \"yourtoken\"\n\n&#91;server.transport]\ntype = \"tls\"\n\n&#91;server.transport.tls]\npkcs12 = \"\/root\/rathole_file\/rathole.p12\"\npkcs12_password = \"123456\"\n\n&#91;server.services.my_nas_ssh]\nbind_addr = \"0.0.0.0:5200\"<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u5185\u7f51\u670d\u52a1\u5668\u914d\u7f6e\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>#client.toml\n&#91;client]\n# \u5fc5\u987b\u586b\u5199\u57df\u540d\uff0c\u4e0d\u80fd\u586bIP\uff0c\u5426\u5219\u8bc1\u4e66\u9a8c\u8bc1\u4f1a\u5931\u8d25\nremote_addr = \"your-domain.com:443\" \ndefault_token = \"yourtoken\"\n\n&#91;client.transport]\ntype = \"tls\"\n\n&#91;client.transport.tls]\n# \u5fc5\u987b\u586b\u5199\u5df2\u57df\u540d\uff0c\u7528\u4e8e SNI \u9a8c\u8bc1\uff0c\u8fd9\u662f\u4f2a\u88c5\u7684\u5173\u952e\nhostname = \"your-domain.com\"\n#Let's Encrypt \u662f\u53d7\u4fe1\u4efb\u7684\u8bc1\u4e66\uff0c\u65e0\u9700ca_cert\u53c2\u6570\uff0c\u7cfb\u7edf\u4f1a\u81ea\u52a8\u9a8c\u8bc1\n\n&#91;client.services.my_nas_ssh]\nlocal_addr = \"127.0.0.1:22\"<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u68c0\u67e5\u7f51\u7ad9\u8bc1\u4e66\u662f\u5426\u6b63\u786e<\/strong>: \u4f7f\u7528 OpenSSL \u5ba2\u6237\u7aef\u624b\u52a8\u6d4b\u8bd5 TLS\/SSL \u8fde\u63a5<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>openssl s_client -connect your-domain.com:443 -servername your-domain.com<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u4ee5\u4e0a\u914d\u7f6e\uff0c\u8bc1\u4e66\u683c\u5f0f\u517c\u5bb9\u6027\u5df2\u6210\u529f\u89e3\u51b3\uff0c\u9a8c\u8bc1\u901a\u8fc7\uff0c\u4f46443\u7aef\u53e3\u65e0\u6cd5\u76d1\u542c\u6210\u529f\uff08\u4e3b\u5305\u57df\u540d\u672a\u5907\u6848\uff09<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#ff6900\" class=\"has-inline-color\">\u2b50\ufe0f\u4f7f\u7528\u57df\u540d\u5fc5\u987b\u662f\u5df2\u5907\u6848\u57df\u540d\uff0c\u6ca1\u5907\u6848\u7684\u57df\u540d\u7528 443 \u4f1a\u88ab\u4e91\u670d\u52a1\u5546\u963b\u65ad<\/mark><\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">5. \u5176\u4f59\u65b9\u6cd5\uff1a<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">TLS + WebSocket \u5c01\u88c5<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">rathole\u81ea\u5e26 TLS\uff08rustls\uff09 + CA\u8bc1\u4e66<\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u914d\u7f6e\u6982\u89c8\uff1a rathole\u5185\u7f51\u7a7f\u900f\u57fa\u7840\u914d\u7f6e \u53c2\u8003\u94fe\u63a5\uff1ahttps:\/\/github.com\/rathole-o [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-41","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/blog.lyx.cool\/index.php?rest_route=\/wp\/v2\/posts\/41","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.lyx.cool\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.lyx.cool\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.lyx.cool\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.lyx.cool\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=41"}],"version-history":[{"count":2,"href":"https:\/\/blog.lyx.cool\/index.php?rest_route=\/wp\/v2\/posts\/41\/revisions"}],"predecessor-version":[{"id":46,"href":"https:\/\/blog.lyx.cool\/index.php?rest_route=\/wp\/v2\/posts\/41\/revisions\/46"}],"wp:attachment":[{"href":"https:\/\/blog.lyx.cool\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=41"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.lyx.cool\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=41"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.lyx.cool\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=41"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}