GOSTC NAT Traversal
GOSTC
What is GOSTC?
GOSTC v2 is an intranet penetration tool based on the open-source FRP project. It provides a web UI to manage tunnels, so you can change configurations from anywhere with almost no learning curve, and it supports multiple platforms.
Anyone with a cloud server can set up their own node. The quality of the tunnel (speed, bandwidth, latency) fully depends on your own server.
This project has both an open-source edition and a Pro edition. One-KVM uses the open-source edition.
GOSTC project page: https://docs.sian.one/gostc/info/
One-KVM integrated images and Docker images from version 251001 onwards ship with GOSTC preinstalled. After logging into the One-KVM home page, you will see the GOSTC service; click it to open the configuration page.
Usage
Everything is configured via the web UI; you do not need to edit any config files manually. All operations for the GOSTC tunneling client are done on the GOSTC service website. The One-KVM client only needs a secret key; after that, it will automatically and continuously pull and apply the configuration you set on the service website.
First, choose a service website. The following two are completely free:
Note
The tunneling service is provided for free and is intended only for personal learning, testing, and non-commercial use. Long-term traffic brushing, bulk account registration, network attacks, data scraping, distribution of illegal or harmful content, or any form of commercial use is strictly prohibited.
Please use resources reasonably and avoid abuse that could lead to service disruption, so that everyone can enjoy a fair and healthy environment.
Optimized for One-KVM usage. Only accepts One-KVM clients and does not accept other applications (helps prevent abuse).
The official GOSTC service site with no usage restrictions, but typically higher latency.
After registering on the service website, first add a client device. The device name is arbitrary; click Save, then click the “link key” field and copy the key value. Next, paste the key and the service address (without the http:// or https:// prefix) into the One-KVM GOSTC page. When adding a client in One-KVM, it is recommended to enable auto-start so that the tunnel starts automatically after the device reboots.
After adding the client device, toggle the switch to ON. The client will connect to the server, and you should see it come online on the service website.
Once the client is online, you can create tunnels. On the service website, go to the port forwarding page and add a new forwarding rule. Choose a node according to your needs, set a custom name, set the internal address to 127.0.0.1, and the internal port usually to 443 (or 4430 if you deployed via Docker). Save the rule, and you will see the public access address generated.
Any later changes (such as switching ports, changing nodes, or adding additional nodes) can be made directly on the service website; the One-KVM GOSTC client will automatically fetch and apply the updated configuration.
Advanced Usage
You can also follow the documentation to add your own relay nodes or set up your own GOSTC server. The usage is very flexible.