Planning to switch to HAProxy, what plan?
-
So atm I am running an Traefik instance on the inside that gets all 80/443 traffics sent to it through the Firewall. But I all that could be handled inside the FW using Acme and HAProxy.
Should I set up one backend for every service and one frontend for all services?
Or should I set up one backend for every service and multiple frontends for every services?
-
@swemattias
You need a backend for each local IP and each service.And you need one frontend for each WAN IP and each service.
So you might have to set up one frontend for the ports 80 and 443 (you can combine these in one) and multiple backends.
-
@viragomann thank you! I need to do some reading to get the switch to haproxy as smooth as possible.
-
@swemattias
I learned somethings from these websites:
https://github.com/ahuacate/pfsense-haproxy/blob/master/README.md
https://docs.deeztek.com/books/pfsense/page/pfsense-haproxy-softether-vpn
https://cbonte.github.io/haproxy-dconv/2.2/configuration.html