iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
To access a service behind NAT without forwarding a port on the private network’s router, run frpc beside the service and connect it outward to frps on a publicly reachable host. Configure a proxy from an endpoint on that host to the service’s local address and port. For public access, this can expose a remote TCP port; for access limited to authorized clients, frp documents an STCP pattern using a shared secret and visitor client.
How frp reaches a service behind NAT
frp is a reverse proxy. Its documented deployment uses frps on a host with a public IP address and frpc inside the network where the service runs. The client initiates an outbound connection to the server, and the proxy configuration maps an endpoint at the public host to the local service. The public host becomes the reachable endpoint; frp does not make the home or office connection itself publicly addressable.
This design avoids configuring inbound port forwarding at the private site, but it still requires a reachable server and suitable firewall rules there. The official frp project overview describes the software’s role and supported protocols.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →What you need before configuring frp
- A host with a public IP address to run
frps. - The machine or network where
frpccan reach the local service. - Matching frp client and server binaries downloaded from the project’s release page.
- Firewall rules on the public host that allow the client connection and any public proxy ports you choose.
- The service’s protocol, local address, and port, plus a decision about whether it should be public or restricted to visitor clients.
The official setup guide says frp is written in Go, supports cross-platform deployment, and can run from downloaded binaries without additional dependencies beyond the relevant platform requirements.
#1 Best Overall
- Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
- Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
- Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
- Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
- 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.
Configure a basic TCP proxy
The project’s SSH example illustrates the port roles. On the server, frps listens for client connections on port 7000. On the client, frpc connects to that server address and port, then maps local SSH at 127.0.0.1:22 to remote port 6000. These are example values, not required defaults: choose ports appropriate for your service and allow the required traffic through the public host’s firewall.
- Install the matching frp binaries on the public host and the machine that can reach the local service.
- On the public host, configure
frpswith a bind port, such as the example’s7000. Ensure the host firewall permits the client to connect to it. - On the client, set
serverAddrto the public host’s address andserverPortto the configured bind port. Define a TCP proxy with the service’slocalIPandlocalPort, and select an availableremotePorton the public host. - Start
frpsandfrpcwith their configuration files. Test the service using the public host and chosen remote port. - For a long-running setup, run both components under an appropriate process manager; the setup guide names systemd and supervisor as examples.
Current documented configuration formats are TOML, YAML, and JSON. INI is still supported but deprecated, and new features are available only in TOML, YAML, or JSON. See the setup guide and configuration reference for the project’s current formats and example parameters.
Rank #2
- 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
- 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
- Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
- 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
- What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.
Choose a proxy type and access scope
| Pattern | When it fits | What the access model means |
|---|---|---|
| TCP or UDP | A service speaks TCP or UDP, such as the documented SSH-over-TCP or DNS-over-UDP examples. | A selected remote port on the public host carries traffic to the local service. Anyone able to reach that endpoint may be able to connect unless access is restricted separately. |
| HTTP or HTTPS | A web service needs domain-based routing or an HTTPS-related setup. | frp documents custom-domain web routing and an https2http plugin example that converts a local HTTP service to HTTPS at the frp endpoint. |
| STCP | A service should be reachable by configured visitor clients rather than exposed as a conventional public remote port. | The documented pattern pairs a service proxy’s preshared secretKey with a matching visitor configuration on a second frpc client. The service example omits remotePort; protect and handle the shared secret carefully. |
| XTCP | You want to attempt direct peer-to-peer data transfer, with frps coordinating the connection. | It may fail with some NAT devices. The project recommends STCP as a fallback; XTCP is not a guarantee of connectivity through every carrier-grade or symmetric NAT. |
The project overview and README and examples also document TCP multiplexing, DNS forwarding, exposing a Unix domain socket through TCP, and simple static-file access. These are separate use cases rather than steps required for a basic TCP tunnel.
Keep the endpoint and configuration manageable
- Use a current release and select a supported configuration format, particularly if you need newer features.
- Check that the public host’s firewall permits the frpc connection and the chosen public proxy traffic; the private site does not need an inbound port-forwarding rule for this outward-initiated pattern.
- Choose the exposure scope deliberately: a public remote port and visitor-restricted STCP have different access models.
- Use a process manager for components that must stay running, and verify the service is reachable through the intended endpoint after startup.
frp’s official materials describe deployment roles and features but do not establish a performance benchmark or guarantee throughput. The public host’s cost, network limits, region, and firewall controls are separate considerations when choosing where to run frps.
Quick Recap
Best Value
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
Rank #4
- Dual Converters, Infinite Potential：Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
- Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
- Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
- Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
- Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft
Rank #3
- Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
- Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
- Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
- Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
- What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
