I'll teach you how to use NPs to build intranet penetration services. When you go out, you can easily connect your lightweight notebook to your home game console to play remotely

---

Preface

I believe everyone is carrying a light book when traveling or on business , If you want to play games in your spare time , So thin and light books obviously can't meet their own game needs , So this tutorial is to teach you to use NPS Build an intranet penetration service , Easily connect the game console at home to play remotely .

---

One 、NPS summary

NPS It's a lightweight 、 High performance 、 Powerful intranet penetrating proxy server , Support tcp、udp、http Wait for almost all traffic forwarding , Support WEB Interface management host connection .

NPS Principle

function NPS Cloud server and operation of services NPS The host of the client will create a TCP or UDP Tunnel , You can map a port on the ECs to the specified port of the client host , The traffic of other hosts accessing the port of the ECS will be forwarded to the mapped host port through the created tunnel , Achieve intranet penetration effect .

Two 、NPS Server setup

1、 Download a software

This tutorial uses github The above open source tool , Specific links are attached below . Download the version corresponding to your server and client system , If you cannot access , You can also share and download through my online disk , There are in the net disk linux and windows Of 64 Bit server , also windows64 Bit client .

https://github.com/ehang-io/nps/releases

 Network disk link ：https://pan.baidu.com/s/10a6RQPi16ivwjHt5qPKEFA 
 Extraction code ：zx68

2、 ECS configuration

First you need a cloud server , You can choose cloud server manufacturers such as Tencent cloud or Alibaba cloud , There are usually large discounts , I chose the lightweight application server of Tencent cloud ubuntu20.04 System .

2.1、 Firewall configuration

The following ports need to be released （ How to change the port by yourself will be described later , Increase security ）
TCP22： For remote use SSH Connect
TCP8080： user NPS The default login port of the management interface

2.2、 use WinSCP Upload service files remotely

• Use WinSCP adopt 22 Port to root Connect to the server as , Then upload the server file linux_amd64_server.tar.gz.
• If your ECS is windows System , You can use it directly windows The self-contained remote desktop copies the software .

2.3、 Use SSH Terminal installation start

Use MobaXterm、SecureCRT or PUTTY Equal terminal ssh Connect to the ECS , To configure .

• install

mkdir nps // establish nps Folder used 
mv linux_amd64_server.tar.gz ./nps // Move the software to the created nps In the folder 
cd nps // Enter the created nps Folder 
tar -zxvf linux_amd64_server.tar.gz // Decompress the package , Use "ls" Command can see more under the directory conf and web Folder , There is also an executable nps

• start-up

./nps install // Enter the installation command 
nps start // start-up nps service 

If it is windows System , Run as Administrator cmd, Enter... During installation nps.exe install, To start, you need to enter the program directory nps.exe start.
After installation windows The profile is located in C:\Program Files\nps,linux be located /etc/nps

• Browser open IP+8080 port , You can see nps Management interface , The default user name and password are admin/123, Please revise it in time .
  
  

2.4、 Modify the configuration file

• If you need to modify the login user name 、 password 、 Web login port and other information , You can modify /etc/nps Under the nps.conf file , The relevant parameter information can be seen in the table .
  

name	meaning
web_port	web Management port
web_password	web Interface management password
web_username	web Interface management account
web_base_url	web Manage the main path , Is used to web Management is behind the agent subpath
bridge_port	Server client communication port
https_proxy_port	Domain name agent https Agent listening port
http_proxy_port	Domain name agent http Agent listening port
auth_key	web api secret key
bridge_type	The connection between the client and the server kcp or tcp
public_vkey	The key when the client starts in profile mode , If it is set to null, the client profile connection mode will be closed
ip_limit	Whether to limit ip visit ,true or false Or neglect
flow_store_interval	Server traffic data persistence interval , Units of minutes , Ignore means no persistence
log_level	Log output level
auth_crypt_key	Get the server authKey At the time of the aes Encryption key ,16 position
p2p_ip	Server side Ip, Use p2p Mode required
p2p_port	p2p Mode on udp port
pprof_ip	debug pprof Server side ip
pprof_port	debug pprof port
disconnect_timeout	Client connection timeout , Company 5s, The default value is 60, namely 300s = 5mins

• You can see in the dashboard that the connection port of the client is 8024, You need to release this port on the firewall of the ECs to work properly .

3、 ... and 、 Client connection

• Click the client in the dashboard , Add a new client as shown in the picture .

• Fill in the notes , The following compression and encryption options “ yes ”.

• After adding, you will get a client ID by 2.

• Click on the plus sign on the left , The following client command will appear , This order is in windows Executed under the system , You don't need the previous "./".

• It's preserved in nps Press and hold shift Click the right mouse button , open Powershell

• Enter the command cmd, And commands obtained from the web page , appear Successful That's all right. .
• You can see that the status on the web page shows online
• establish TCP Tunnel
  
• client ID Create the client before writing ID, Write an unused port for the server port , Of course, this port should also be allowed in the firewall . The target port writes the port to be accessed .

• In this way, all traffic accessing the server port will be forwarded to the client port , It will successfully connect to the host in the intranet .

summary

Use nps Such a gadget achieves the effect of Intranet penetration , It can realize the need of connecting the lightweight book for external use to the game console at home to play happily , Of course other TCP and UDP All connections are feasible , Look at your specific needs , It will not occupy too many resources of cloud services , It's worth recommending .