Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Multiple domains, one IP

    Scheduled Pinned Locked Moved pfSense Packages
    15 Posts 7 Posters 12.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • E
      eirikz
      last edited by

      I'm somewhat confused as if I'm doing this right.

      I can't really see a place in the HAProxy GUI-frontend where I specify the exact domain name that I'm wanting it to pass to which host.
      And I guess I don't need to NAT the ports on top of the HAProxy ?

      The config looks like

      /var/etc/haproxy.cfg file contents: 
      global
      	maxconn			5000
      	uid			80
      	gid			80
      	nbproc			2
      	chroot			/var/empty
      	daemon
      
      frontend www.zyx.com-merged
      	bind			88.84.x.x:80
      	mode			http
      	log			global
      	option			dontlognull
      	maxconn			5000
      	clitimeout		30000
      	default_backend		Gaara_http
      
      backend Gaara_http
      	mode			http
      	balance			roundrobin
      	contimeout		30000
      	srvtimeout		30000
      	option			httpchk HEAD / HTTP/1.0
      	server			Gaara 192.168.2.244:80   check inter 1000  weight 1000
      
      backend Wero_http
      	mode			http
      	balance			roundrobin
      	contimeout		30000
      	srvtimeout		30000
      	option			httpchk HEAD / HTTP/1.0
      	server			Wero 192.168.2.228:80   check inter 1000  weight 1000
      

      Running pfSense on :
      DL380G4 with ESX Vsphere and DL360G4p bare metal

      1 Reply Last reply Reply Quote 0
      • E
        eirikz
        last edited by

        Shameless self-bump, hoping someone has some insight.

        Running pfSense on :
        DL380G4 with ESX Vsphere and DL360G4p bare metal

        1 Reply Last reply Reply Quote 0
        • chpalmerC
          chpalmer
          last edited by

          I know of a site that uses Wampserver on one machine to serve a dozen sites…  Are you talking one server or several behind your router?

          Triggering snowflakes one by one..
          Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

          1 Reply Last reply Reply Quote 0
          • E
            eirikz
            last edited by

            Currently I have a vmware server running behind my pfsense, with currently three different servers with different services (ssh, apache, ftp, etc).
            And the problem is I only have one official IP from my ISP.

            So the case is I want xyz.com to be redirected to server 1 regardless of service requested, and zxy.com to be redirected to server 2 regardless of service requested.
            (As long as I have specified the service).

            Running pfSense on :
            DL380G4 with ESX Vsphere and DL360G4p bare metal

            1 Reply Last reply Reply Quote 0
            • jimpJ
              jimp Rebel Alliance Developer Netgate
              last edited by

              @eirikz:

              Currently I have a vmware server running behind my pfsense, with currently three different servers with different services (ssh, apache, ftp, etc).
              And the problem is I only have one official IP from my ISP.

              So the case is I want xyz.com to be redirected to server 1 regardless of service requested, and zxy.com to be redirected to server 2 regardless of service requested.
              (As long as I have specified the service).

              That will not work. The only reason it could work with HTTP is because it sends a host header that a proxy can deal with. SSH, FTP, and most other protocols do not work that way.

              Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

              Need help fast? Netgate Global Support!

              Do not Chat/PM for help!

              1 Reply Last reply Reply Quote 0
              • D
                dszp
                last edited by

                Jim's right, but as an add-on: The only workaround for this with one external IP is to use nonstandard ports and forward them to the services on each box. So port 22 for SSH to internal server 1, port 222 (or take your pick) for SSH to internal server 2, etc. FTP may not work properly at all doing this but it might, I haven't tested it. SSH and HTTP you can for sure, just have to make sure to access it at the nonstandard port. pfSense can translate a nonstandard external port to a standard internal one so you don't need to change the servers themselves to do this.

                David Szpunar

                1 Reply Last reply Reply Quote 0
                • E
                  eirikz
                  last edited by

                  Yeah, that's the config I have per today, I will have to try with multiple interfaces to see how many IP's I can squeeze out of my ISP.

                  Running pfSense on :
                  DL380G4 with ESX Vsphere and DL360G4p bare metal

                  1 Reply Last reply Reply Quote 0
                  • S
                    Supermule Banned
                    last edited by

                    Use a L7 capable box behind PFSense…..

                    1 Reply Last reply Reply Quote 0
                    • G
                      g4m3c4ck
                      last edited by

                      Just a question. If they are all running on the same machine why not use apache virtual hosts? Security concerns?

                      1 Reply Last reply Reply Quote 0
                      • E
                        eirikz
                        last edited by

                        Not the same machine, different virtual machines running under ESX Vsphere.

                        Running pfSense on :
                        DL380G4 with ESX Vsphere and DL360G4p bare metal

                        1 Reply Last reply Reply Quote 0
                        • G
                          g4m3c4ck
                          last edited by

                          Guess you are going to need your own subnet then.

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.