Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Multiple domains, one IP

    Scheduled Pinned Locked Moved pfSense Packages
    15 Posts 7 Posters 12.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • jimpJ
      jimp Rebel Alliance Developer Netgate
      last edited by

      It's there, under "haproxy". The lower case entries are sorted after the upper case (this is fixed in 2.0)

      Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

      Need help fast? Netgate Global Support!

      Do not Chat/PM for help!

      1 Reply Last reply Reply Quote 0
      • E
        eirikz
        last edited by

        I'm somewhat confused as if I'm doing this right.

        I can't really see a place in the HAProxy GUI-frontend where I specify the exact domain name that I'm wanting it to pass to which host.
        And I guess I don't need to NAT the ports on top of the HAProxy ?

        The config looks like

        /var/etc/haproxy.cfg file contents: 
        global
        	maxconn			5000
        	uid			80
        	gid			80
        	nbproc			2
        	chroot			/var/empty
        	daemon
        
        frontend www.zyx.com-merged
        	bind			88.84.x.x:80
        	mode			http
        	log			global
        	option			dontlognull
        	maxconn			5000
        	clitimeout		30000
        	default_backend		Gaara_http
        
        backend Gaara_http
        	mode			http
        	balance			roundrobin
        	contimeout		30000
        	srvtimeout		30000
        	option			httpchk HEAD / HTTP/1.0
        	server			Gaara 192.168.2.244:80   check inter 1000  weight 1000
        
        backend Wero_http
        	mode			http
        	balance			roundrobin
        	contimeout		30000
        	srvtimeout		30000
        	option			httpchk HEAD / HTTP/1.0
        	server			Wero 192.168.2.228:80   check inter 1000  weight 1000
        

        Running pfSense on :
        DL380G4 with ESX Vsphere and DL360G4p bare metal

        1 Reply Last reply Reply Quote 0
        • E
          eirikz
          last edited by

          Shameless self-bump, hoping someone has some insight.

          Running pfSense on :
          DL380G4 with ESX Vsphere and DL360G4p bare metal

          1 Reply Last reply Reply Quote 0
          • chpalmerC
            chpalmer
            last edited by

            I know of a site that uses Wampserver on one machine to serve a dozen sites…  Are you talking one server or several behind your router?

            Triggering snowflakes one by one..
            Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

            1 Reply Last reply Reply Quote 0
            • E
              eirikz
              last edited by

              Currently I have a vmware server running behind my pfsense, with currently three different servers with different services (ssh, apache, ftp, etc).
              And the problem is I only have one official IP from my ISP.

              So the case is I want xyz.com to be redirected to server 1 regardless of service requested, and zxy.com to be redirected to server 2 regardless of service requested.
              (As long as I have specified the service).

              Running pfSense on :
              DL380G4 with ESX Vsphere and DL360G4p bare metal

              1 Reply Last reply Reply Quote 0
              • jimpJ
                jimp Rebel Alliance Developer Netgate
                last edited by

                @eirikz:

                Currently I have a vmware server running behind my pfsense, with currently three different servers with different services (ssh, apache, ftp, etc).
                And the problem is I only have one official IP from my ISP.

                So the case is I want xyz.com to be redirected to server 1 regardless of service requested, and zxy.com to be redirected to server 2 regardless of service requested.
                (As long as I have specified the service).

                That will not work. The only reason it could work with HTTP is because it sends a host header that a proxy can deal with. SSH, FTP, and most other protocols do not work that way.

                Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                Need help fast? Netgate Global Support!

                Do not Chat/PM for help!

                1 Reply Last reply Reply Quote 0
                • D
                  dszp
                  last edited by

                  Jim's right, but as an add-on: The only workaround for this with one external IP is to use nonstandard ports and forward them to the services on each box. So port 22 for SSH to internal server 1, port 222 (or take your pick) for SSH to internal server 2, etc. FTP may not work properly at all doing this but it might, I haven't tested it. SSH and HTTP you can for sure, just have to make sure to access it at the nonstandard port. pfSense can translate a nonstandard external port to a standard internal one so you don't need to change the servers themselves to do this.

                  David Szpunar

                  1 Reply Last reply Reply Quote 0
                  • E
                    eirikz
                    last edited by

                    Yeah, that's the config I have per today, I will have to try with multiple interfaces to see how many IP's I can squeeze out of my ISP.

                    Running pfSense on :
                    DL380G4 with ESX Vsphere and DL360G4p bare metal

                    1 Reply Last reply Reply Quote 0
                    • S
                      Supermule Banned
                      last edited by

                      Use a L7 capable box behind PFSense…..

                      1 Reply Last reply Reply Quote 0
                      • G
                        g4m3c4ck
                        last edited by

                        Just a question. If they are all running on the same machine why not use apache virtual hosts? Security concerns?

                        1 Reply Last reply Reply Quote 0
                        • E
                          eirikz
                          last edited by

                          Not the same machine, different virtual machines running under ESX Vsphere.

                          Running pfSense on :
                          DL380G4 with ESX Vsphere and DL360G4p bare metal

                          1 Reply Last reply Reply Quote 0
                          • G
                            g4m3c4ck
                            last edited by

                            Guess you are going to need your own subnet then.

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.