Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Wan IP to multiple hosts

    Scheduled Pinned Locked Moved General pfSense Questions
    5 Posts 5 Posters 453 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      Melkske24
      last edited by

      Hello Who can help me, or what is the best solution.

      I have one Wan ip adds.

      I have 3 virtual machines in the DMZ.

      I would to like access my clients to the 3 virtual machines depending on the client.

      Need via the Wan access to each VM with https, ftp and UDP port 24576 / 24577

      What is the best solution?

      HAproxy?

      Regards
      Melkske

      1 Reply Last reply Reply Quote 0
      • JKnottJ
        JKnott
        last edited by

        About the only thing you can do is use non-standard ports, so that port forwarding can reach the appropriate VM.  Each VM will use a different port number.

        PfSense running on Qotom mini PC
        i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
        UniFi AC-Lite access point

        I haven't lost my mind. It's around here...somewhere...

        1 Reply Last reply Reply Quote 0
        • P
          PiBa
          last edited by

          HAproxy can help for the HTTP / HTTPS traffic, for ftp and udp that wont work..

          1 Reply Last reply Reply Quote 0
          • R
            Ryu945
            last edited by

            You can VPN into the router itself and then access those virtual machines as if your in the same LAN.

            1 Reply Last reply Reply Quote 0
            • JeGrJ
              JeGr LAYER 8 Moderator
              last edited by

              I would to like access my clients to the 3 virtual machines depending on the client.

              If by "depending on the client" you mean that you can identify your client by specific IP ranges/addresses, then it isn't that much of a problem. You can create Port Forwards with specific source addresses coming to the WAN IP to specific internal hosts. So for example:

              Src | Dst | NAT

              1.2.3.4/24 | <wan ip="">| 10.0.0.11 (Host 1 in DMZ)
              2.3.4.5/32 | <wan ip="">| 10.0.0.12 (Host 2 in DMZ)
              3.4.5.6/28 | <wan ip="">| 10.0.0.13 (Host 3 in DMZ)

              That is completely possible. Only if you want to allow access from ANY (whole internet) or you want to address the same host twice with a source already configured (e.g. 1.2.3.4/24 shall also access 10.0.0.12) that would only be possible with proxies of any kind.

              Otherwise just use different Forwardings for different clients :)</wan></wan></wan>

              Don't forget to upvote 👍 those who kindly offered their time and brainpower to help you!

              If you're interested, I'm available to discuss details of German-speaking paid support (for companies) if needed.

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.