<![CDATA[Wan IP to multiple hosts]]>Hello Who can help me, or what is the best solution.

I have one Wan ip adds.

I have 3 virtual machines in the DMZ.

I would to like access my clients to the 3 virtual machines depending on the client.

Need via the Wan access to each VM with https, ftp and UDP port 24576 / 24577

What is the best solution?

HAproxy?

Regards
Melkske

]]>https://forum.netgate.com/topic/125589/wan-ip-to-multiple-hostsRSS for NodeSat, 11 Apr 2026 12:49:24 GMTWed, 10 Jan 2018 21:07:20 GMT60<![CDATA[Reply to Wan IP to multiple hosts on Mon, 15 Jan 2018 14:56:32 GMT]]>

I would to like access my clients to the 3 virtual machines depending on the client.

If by "depending on the client" you mean that you can identify your client by specific IP ranges/addresses, then it isn't that much of a problem. You can create Port Forwards with specific source addresses coming to the WAN IP to specific internal hosts. So for example:

Src | Dst | NAT

1.2.3.4/24 | <wan ip="">| 10.0.0.11 (Host 1 in DMZ)
2.3.4.5/32 | <wan ip="">| 10.0.0.12 (Host 2 in DMZ)
3.4.5.6/28 | <wan ip="">| 10.0.0.13 (Host 3 in DMZ)

That is completely possible. Only if you want to allow access from ANY (whole internet) or you want to address the same host twice with a source already configured (e.g. 1.2.3.4/24 shall also access 10.0.0.12) that would only be possible with proxies of any kind.

Otherwise just use different Forwardings for different clients :)</wan></wan></wan>

]]>https://forum.netgate.com/post/746023https://forum.netgate.com/post/746023Mon, 15 Jan 2018 14:56:32 GMT<![CDATA[Reply to Wan IP to multiple hosts on Sun, 14 Jan 2018 15:38:18 GMT]]>You can VPN into the router itself and then access those virtual machines as if your in the same LAN.

]]>https://forum.netgate.com/post/745858https://forum.netgate.com/post/745858Sun, 14 Jan 2018 15:38:18 GMT<![CDATA[Reply to Wan IP to multiple hosts on Wed, 10 Jan 2018 22:39:01 GMT]]>HAproxy can help for the HTTP / HTTPS traffic, for ftp and udp that wont work..

]]>https://forum.netgate.com/post/745282https://forum.netgate.com/post/745282Wed, 10 Jan 2018 22:39:01 GMT<![CDATA[Reply to Wan IP to multiple hosts on Wed, 10 Jan 2018 21:24:14 GMT]]>About the only thing you can do is use non-standard ports, so that port forwarding can reach the appropriate VM.  Each VM will use a different port number.

]]>https://forum.netgate.com/post/745264https://forum.netgate.com/post/745264Wed, 10 Jan 2018 21:24:14 GMT