• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Wan IP to multiple hosts

Scheduled Pinned Locked Moved General pfSense Questions
5 Posts 5 Posters 465 Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • M
    Melkske24
    last edited by Jan 10, 2018, 9:07 PM

    Hello Who can help me, or what is the best solution.

    I have one Wan ip adds.

    I have 3 virtual machines in the DMZ.

    I would to like access my clients to the 3 virtual machines depending on the client.

    Need via the Wan access to each VM with https, ftp and UDP port 24576 / 24577

    What is the best solution?

    HAproxy?

    Regards
    Melkske

    1 Reply Last reply Reply Quote 0
    • J
      JKnott
      last edited by Jan 10, 2018, 9:24 PM

      About the only thing you can do is use non-standard ports, so that port forwarding can reach the appropriate VM.  Each VM will use a different port number.

      PfSense running on Qotom mini PC
      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
      UniFi AC-Lite access point

      I haven't lost my mind. It's around here...somewhere...

      1 Reply Last reply Reply Quote 0
      • P
        PiBa
        last edited by Jan 10, 2018, 10:39 PM

        HAproxy can help for the HTTP / HTTPS traffic, for ftp and udp that wont work..

        1 Reply Last reply Reply Quote 0
        • R
          Ryu945
          last edited by Jan 14, 2018, 3:38 PM

          You can VPN into the router itself and then access those virtual machines as if your in the same LAN.

          1 Reply Last reply Reply Quote 0
          • J
            JeGr LAYER 8 Moderator
            last edited by Jan 15, 2018, 2:56 PM

            I would to like access my clients to the 3 virtual machines depending on the client.

            If by "depending on the client" you mean that you can identify your client by specific IP ranges/addresses, then it isn't that much of a problem. You can create Port Forwards with specific source addresses coming to the WAN IP to specific internal hosts. So for example:

            Src | Dst | NAT

            1.2.3.4/24 | <wan ip="">| 10.0.0.11 (Host 1 in DMZ)
            2.3.4.5/32 | <wan ip="">| 10.0.0.12 (Host 2 in DMZ)
            3.4.5.6/28 | <wan ip="">| 10.0.0.13 (Host 3 in DMZ)

            That is completely possible. Only if you want to allow access from ANY (whole internet) or you want to address the same host twice with a source already configured (e.g. 1.2.3.4/24 shall also access 10.0.0.12) that would only be possible with proxies of any kind.

            Otherwise just use different Forwardings for different clients :)</wan></wan></wan>

            Don't forget to upvote 👍 those who kindly offered their time and brainpower to help you!

            If you're interested, I'm available to discuss details of German-speaking paid support (for companies) if needed.

            1 Reply Last reply Reply Quote 0
            1 out of 5
            • First post
              1/5
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
              This community forum collects and processes your personal information.
              consent.not_received