Help with VIPs

wesleywillis · Mar 26, 2021, 1:10 AM

Hello,

Looking for advice on how to best setup and handle VIPs for my scenario...

I have a single pfSense firewall in front of a hyper-v environment, with a /26 public ip network.

I want to reserve .3 through .62 for my for public facing servers, being able to map them to internal servers/vms. Right now I have this setup using Proxy ARP and 1:1 NAT. I mostly use aliases to apply rule sets based on the type of servers, generally web. Currently, everything in on the same 10.18.18.0/24 subnet, however I'd like to start using VLANS to segment this traffic for some new projects. I'm thinking of restructuring something like the following:

Default (Managent) Lan: 10.0.0.0/24
Managed Servers: 10.0.10.0/24
Client A: 10.0.20.0/24
Client B: 10.0.30.0/24

Anyhow, any reason I should be using CARP or IP Alias over Proxy in these scenarios? By no means a VIP expert. Thanks for any input in advance!