FRP配合Nginx实现域名访问Windows远程桌面的配置方案

1
# HTTP重定向到HTTPS配置
2
server {
3
    listen 80;
4
    server_name xxxx.com www.xxxx.com;
5

6
    # 将HTTP请求重定向到HTTPS
7
    return 301 https://$host$request_uri;
8
}
9

10
# RDP Guacamole Web访问配置（如果使用）
11
server {
12
    listen 443 ssl;
13
    server_name xxxx.com www.xxxx.com;
14

15
    # SSL证书配置
16
    ssl_certificate /etc/nginx/ssl/xxxx.crt;
17
    ssl_certificate_key /etc/nginx/ssl/xxxx.key;
18
    ssl_protocols TLSv1.2 TLSv1.3;
19
    ssl_prefer_server_ciphers on;
20

21
    # RDP Web访问（如使用Apache Guacamole等工具）
22
    location /rdp/ {
23
        proxy_pass http://localhost:8080/guacamole/;
24
        proxy_buffering off;
25
        proxy_http_version 1.1;
26
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
27
        proxy_set_header Upgrade $http_upgrade;
28
        proxy_set_header Connection $http_connection;
29
        proxy_cookie_path /guacamole/ /rdp/;
30
        access_log off;
31
    }
32

33
    # FRP管理面板访问
34
    location /frp/ {
35
        proxy_pass http://localhost:7500/;
36
        proxy_set_header Host $host;
37
        proxy_set_header X-Real-IP $remote_addr;
38
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
39
        proxy_set_header REMOTE-HOST $remote_addr;
40
    }
41
}

1
# 在http {...}之外添加
2
stream {
3
    # RDP流量转发
4
    server {
5
        listen 3389;  # 标准RDP端口
6
        proxy_pass 127.0.0.1:7001;  # 转发到FRP映射的端口
7
        proxy_connect_timeout 10s;
8
        proxy_timeout 30s;  # RDP连接通常需要更长时间
9
    }
10
}