• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

HAProxy set output interface and IP Address

Scheduled Pinned Locked Moved Cache/Proxy
3 Posts 2 Posters 825 Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • S
    shayandely
    last edited by Dec 23, 2020, 8:46 PM

    I have used HAProxy for couple of months and my traffic was routed though one IP address. For some security reasons, I have to listen on an IP address and send the traffic to the servers with different IP Address. So in this case, what should I do to achieve this goal?
    EX: listen IP is : 10.0.0.1----- send traffic to backend servers : 10.0.0.2
    Also I have just an interface , Only LAN !!! (one hand method)

    P 1 Reply Last reply Dec 23, 2020, 11:23 PM Reply Quote 0
    • P
      PiBa @shayandely
      last edited by Dec 23, 2020, 11:23 PM

      @shayandely
      First configure the pfSense box 2 IP's one on the nic-interface the other as a IP-alias.

      Then on the haproxy configuration pages configure the Frontend to listen on the desired IP.
      As for the backend server its possible to configure a textual option for the servers in a backend. There you could write the text "source 10.0.0.2" iirc that should make it so the TCP connections on the backend are made from that IP.

      S 1 Reply Last reply Dec 24, 2020, 7:11 AM Reply Quote 1
      • S
        shayandely @PiBa
        last edited by Dec 24, 2020, 7:11 AM

        @piba
        Thank you so much. It works like a charm!!👍 👍 👍 👍

        1 Reply Last reply Reply Quote 0
        3 out of 3
        • First post
          3/3
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
          This community forum collects and processes your personal information.
          consent.not_received