Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    HAProxy Port Redirect Internal

    Scheduled Pinned Locked Moved Cache/Proxy
    3 Posts 1 Posters 27 Views 1 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S Offline
      spiker
      last edited by

      Hellp,

      First time poster here and new to PFsense in general. I am using this for a home FWL so nothing crazy important.

      I am trying to use HAProxy now for HTTPS for the firewall management at the moment. But later I plan to expand this to provide https for my blueiris camara server.

      I have the acme certs working just fine through HAProxy but I have to manually put in the destination port, in my case 10443. I have the front end set up to listen on the network in question and on port 443, and the backend set for 10443. I feel like I am missing some rule here however I am not sure.

      ac32d90a-3142-49ca-929a-524d5284faf8-image.png

      1 Reply Last reply Reply Quote 0
      • S Offline
        spiker
        last edited by

        555053eb-ecf9-4461-aa5b-5b132472f40a-image.png

        3588bf5b-9e25-46df-a736-6de25951a311-image.png

        1 Reply Last reply Reply Quote 0
        • S Offline
          spiker
          last edited by spiker

          So I turned off SSL offloading. Since the acme/letsencrypt cert I made earlier is now being used by webConfiguator. I figured the two acme/letsencrypt and self signed certs may be clashing???

          Basically I am now just trying to use HAproxy as a port redirect. Again my webConfiguator is set to listen on port 443 and backend on 10443. I thought this was baked into the whole front end listening on 443 and the backend set for 10443.

          This is being done entirely inside of my own LAN. Later I want to try SSL offload and front end listen on 443 then backend on 80 for my blueiris security cam web server that can not do SSL.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.