haproxy - not working

VioletDragon

UDM

UDM is a Dream Machine by Ubiquti. I would suggest having pfSense handling DNS as it will add more complexity to the solution.

DynDNS is Dynamic DNS.

VIP can be any IP as it's Virtual,.

For SSL in Haproxy, the Certificate is mapped by the Frontend.

TMG

@VioletDragon

Nothing needs to go in here?

I still don't understand the connection between the VIP and the DynDns domain xxxxx.home64.de?
How exactly this plays together.... I have been looking all day
for a video or a configuration guide for my configuration.

Do you mean these here, no??

How and where exactly does the VIP come into play?

TMG

VioletDragon

@TMG Create a A Record that points to WAN.

Under DNS Resolver -> Host Overrides. Create a Host & Domain Name, Add the IP of the VIP.

Frontend of Haproxy needs two Entries One for Port 80 and another Port 443. Both needs the IP of VIP you created which comes under Listen address for both.

For the SSL Certificate you specify it under Certificate. Make sure that the type is configured as http/https offloading.

TMG

@VioletDragon

Port 443/80 here in Haproxy-config. ??

VioletDragon

@TMG No. You need two frontends, one for Port 80 & Port 443.

Listen address needs to be set to the VIP.

Screenshot from 2023-12-14 21-28-19.png

TMG

@VioletDragon
Good morning. I can only say thank you again and again for your efforts.
Must here in the dnsresolver/host_overrides also the created VIP purely

VioletDragon

@TMG Good morning, yes the IP is the VIP.

Depending on your OS, you can test by using Dig in Linux / macOS or nslookup in Windows.

Regards

TMG

@VioletDragon
It's never happened to me before that I can't solve a problem for days. I can't get it to work?
dig always points to the public IP address.
Can you do me a big favor and take a look at the
pdf with the screenshots to see if you notice anything where I'm
am wrong ... or if something important is missing.
... thanks thanks thanks
I just realized I can't attach a pdf?

TMG

Here is a dropbox link
pfsense_screenshots

If you don't want that, please let me know. Maybe we can find another way.

VioletDragon

@TMG Attach Screenshots of DNS Resolver. Screenshots in pdf are small, Also attach screenshots of System -> General Setup & System -> Advanced -> Admin Access.

Regards

TMG

@VioletDragon
I hope it´s bigger and you can read it

pfsense_2