{"id":1390,"date":"2020-09-07T15:54:08","date_gmt":"2020-09-07T07:54:08","guid":{"rendered":"https:\/\/eligiblestore.com\/blog\/?p=1390"},"modified":"2020-09-08T21:18:13","modified_gmt":"2020-09-08T13:18:13","slug":"how-to-setup-a-forever-free-ssh-access-to-raspberry-pi-without-port-forward","status":"publish","type":"post","link":"https:\/\/eligiblestore.com\/blog\/2020\/09\/07\/how-to-setup-a-forever-free-ssh-access-to-raspberry-pi-without-port-forward\/","title":{"rendered":"How to Setup a Forever Free SSH access to Raspberry Pi without port forward"},"content":{"rendered":"

My home ISP is using private IP for internet access meaning I can’t port forward from the router since the public IP actually used by multiple clients \/ houses meanwhile having dynamic IP cost me double, so my options are using ngrok<\/a> or dataplicity<\/a> or reverse tunnel to a VPS a rather expensive yet convenient. However stumbled upon this medium blog https:\/\/medium.com\/@devinjaystokes\/how-to-setup-an-ad-blocking-wireguard-vpn-server-with-pihole-in-the-cloud-for-free-e814e45aac50<\/a>\u00a0got me thinking, hey with the always-eligible-free plan I can SSH my Pi anywhere now, or even better MOSH!!<\/p>\n

CONFIGURING SERVER<\/h2>\n

Go ahead register the oracle cloud following the previous blog mentioned, however since I’m in Asia I am using the server in Japan the closest one that has always-free-eligible tier. There are selection of countries pick the closest one so you can have the best ping.<\/p>\n

You can also follow the previous blog on how the setup the VM one thing to note though please just select Canonical Ubuntu 20.04 or even better CentOS although in this blog I am using Ubuntu 20.04. The reason why not choosing Ubuntu 18 is because it always resulting to Ubuntu 18.04 Minimal image and it rather a hassle way to start.
\n\"\"<\/a><\/p>\n

You can stop following the previous blog until it says check \u201cSkip source\/destination check\u201d from edit VNIC. After that you can SSH your freshly brewed Ubuntu 20.04. If you have downloaded the private key from the previous step you can copy the key to ~\/.ssh\/ and don’t forget to chmod 600 to the file. After that run below command to SSH:<\/p>\n

ssh -i ~\/.ssh\/ssh-key-2020-09-04.key ubuntu@XXX.XXX.XXX.XXX<\/pre>\n
next let’s change the user ubuntu password this is useful later when we are going to create a service.<\/p>\n
\r\n$ sudo su\r\n$ passwd ubuntu\r\n$ [type your new password]\r\n$ exit\r\n<\/pre>\n
Instead of using ssh reverse tunnel we are going to use Fast-Reverse-Proxy for this go ahead download whatever version is the latest from here https:\/\/github.com\/fatedier\/frp\/releases\/latest<\/a>\u00a0for your Ubuntu make sure download\u00a0frp_X.XX.X_linux_amd64.tar.gz<\/span><\/strong>\u00a0to download copy the link and use wget for example:<\/span><\/p>\n
wget https:\/\/github.com\/fatedier\/frp\/releases\/download\/v0.33.0\/frp_0.33.0_linux_amd64.tar.gz<\/pre>\n
\r\n$ tar -xvf frp_0.33.0_linux_amd64.tar.gz\r\n$ cd frp_0.33.0_linux_amd64\r\n$ nano frps_custom.ini\r\n<\/pre>\n
and paste below, do any change if you feel like it, however the mandatory here is to change the token and dashboard password:<\/p>\n
[common]\r\n# A literal address or host name for IPv6 must be enclosed\r\n# in square brackets, as in \"[::1]:80\", \"[ipv6-host]:http\" or \"[ipv6-host%zone]:80\"\r\nbind_addr = 0.0.0.0\r\nbind_port = 7000\r\n\r\n# udp port to help make udp hole to penetrate nat\r\nbind_udp_port = 7001\r\n\r\n# udp port used for kcp protocol, it can be same with 'bind_port'\r\n# if not set, kcp is disabled in frps\r\nkcp_bind_port = 7000\r\n\r\n# set dashboard_addr and dashboard_port to view dashboard of frps\r\n# dashboard_addr's default value is same with bind_addr\r\n# dashboard is available only if dashboard_port is set\r\ndashboard_addr = 0.0.0.0\r\ndashboard_port = 7500\r\n\r\n# dashboard user and passwd for basic auth protect, if not set, both default value is admin\r\ndashboard_user = admin\r\ndashboard_pwd = Y0ur_H4x0r_P@sswd\r\n\r\n# enable_prometheus will export prometheus metrics on {dashboard_addr}:{dashboard_port} in \/metrics api.\r\nenable_prometheus = true\r\n\r\n# dashboard assets directory(only for debug mode)\r\n# assets_dir = .\/static\r\n# console or real logFile path like .\/frps.log\r\nlog_file = .\/frps.log\r\n\r\n# trace, debug, info, warn, error\r\nlog_level = info\r\n\r\nlog_max_days = 3\r\n\r\n# auth token\r\ntoken = URGENT_CHANGE_THIS_TO_YOUR_OWN_FAV_TOKEN_KEYWORD\r\n<\/pre>\n
next let’s create a service for this<\/p>\n
$ sudo vi \/etc\/systemd\/system\/frps.service<\/pre>\n
and paste below (don’t forget to fix the path):<\/p>\n
[Unit]\r\nDescription=FRP Server\r\nAfter=network.target\r\n\r\n[Service]\r\nExecStart=\/path\/to\/frps -c \/path\/to\/frps_custom.ini\r\nRestart=on-abort\r\n\r\n[Install]\r\nWantedBy=multi-user.target\r\n<\/pre>\n
Next let’s enable the service:<\/p>\n
$ sudo systemctl enable frps<\/pre>\n
start \/ stop \/ restart \/ check status:<\/p>\n
\r\n$ sudo service frps start\r\n$ sudo service frps stop\r\n$ sudo service frps restart\r\n$ sudo service frps status\r\n<\/pre>\n
You can also check the log see if server run successfully:<\/p>\n
$ cat \/path\/to\/frps\/frps.log<\/pre>\n
next we need to tell firewall that port 7000 is listening and open it.<\/p>\n
$ sudo iptables -I INPUT 1 -p tcp --dport 7000 -j ACCEPT<\/pre>\n
while we are at it let’s reserve some port as well:<\/p>\n
\r\n$ sudo iptables -I INPUT 1 -p tcp --dport 7500 -j ACCEPT\r\n$ sudo iptables -I INPUT 1 -p tcp --dport 2200 -j ACCEPT\r\n$ sudo iptables -I INPUT 1 -p udp --dport 61001 -j ACCEPT\r\n<\/pre>\n
however doing it in Ubuntu will not be permanent, if you reboot the server, the port will go back to closed. To make it permanent do:<\/p>\n
\r\n$ sudo su\r\n$ apt install iptables-persistent\r\n$ iptables-save > \/etc\/iptables\/rules.v4\r\n$ exit\r\n<\/pre>\n
Not only that you have to set the instance in oracle cloud to listen to port 7000\/TCP<\/p>\n
\"\"<\/a> \"\"<\/a> \"\"<\/a>
\n<\/a><\/p>\n
While we are at it, let’s reserve some port to be open, click on +Additional Ingress Rule and add below:<\/p>\n