Skip to main content

FRP Client Service

The embedded FRP client forwards the Observer web interface through an FRP server. Supply a compatible server, credentials, and domain or remote port; the defaults alone do not establish a public endpoint.

SettingKeyDefaultMeaning
EnableenabledfalseStart the tunnel.
Server Address / Portserver_addr, server_portanyshake.observer, 443FRP server control endpoint.
Protocolprotocolwsstcp, kcp, quic, websocket, or wss.
Authentication Tokentokenanyshake.orgMust match your server configuration.
UseruserEmptyPrefix used to distinguish proxies.
Proxy Nameproxy_nameanyshake-observer-<random>Unique proxy identifier.
TLS Enabletls_enabletrueEncrypt control traffic.
Disable Custom TLS First Bytedisable_custom_tls_first_bytetrueTLS compatibility option.
Key / Cert / Trusted CA Filekey_file, cert_file, trusted_ca_fileEmptyOptional TLS files, readable by the process.
TLS Server Nametls_server_nameEmptyOverride certificate server name.
Connection Pool Countpool_count5Exposed setting; current implementation uses a fixed pool of five.
TCP Multiplexingtcp_muxtrueReuse control transport connections.
Use Encryption / Compressionuse_encryption, use_compressiontrue, trueProxy traffic options.
Use Domain Accessuse_domain_accesstrueHTTP domain proxy; false selects TCP forwarding.
Subdomainsubdomainstation-<random>Subdomain for domain access.
Custom Domainscustom_domains[]Custom hostnames for domain access.
Remote Outbound Portremote_outbound_portRandom 30000–59999Server-side port in TCP mode.

In domain mode, configure the FRP server's HTTP virtual-host routing and DNS for the selected subdomain or custom domain. In TCP mode, allow the configured remote port on the server. Configure HTTPS termination at your public endpoint; enabling FRP transport TLS does not automatically provide browser-facing HTTPS.

The local target comes from server.listen. Use a valid address the client can connect to, such as 127.0.0.1:8073. This module does not publish SeedLink, Winston, or TCP Forwarder ports. Restart the service after saving changes and inspect connection logs if the endpoint is unavailable.