Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Reverse proxy https name resolution

    Scheduled Pinned Locked Moved Cache/Proxy
    7 Posts 2 Posters 853 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      stefan.bendler
      last edited by

      Hi,
      I want to test pfsense with HA reverse proxy functionality. I can't use the second network card for the internet input. In my first test I used the ip adress of pfsense in combination with a port to simulate the reverse proxy functionality. This works so far.
      Can someone of you give me an idea how to use HA reverse proxy functionality within an existing network with internet access? i can't put pfsense between the internal network and the outside internet connection.
      Thank you for you ideas.

      V 1 Reply Last reply Reply Quote 0
      • V
        viragomann @stefan.bendler
        last edited by

        @stefan-bendler said in Reverse proxy https name resolution:

        Can someone of you give me an idea how to use HA reverse proxy functionality within an existing network with internet access?

        Can you give detauls about what you mean?

        i can't put pfsense between the internal network and the outside internet connection.

        That would be the common setup, but it's not a requirement, as long as HAproxy is not running in transparent mode.

        1 Reply Last reply Reply Quote 0
        • S
          stefan.bendler
          last edited by

          I can only use pfSense with one network card. So I gave pfsense a fixed ip adress. I tested both http and https with the haproxy reverse proxy function. I adressed both http & https to the same ip adress as pfSense was set to - but on two different ports ...
          I cant cant cut out external internet connection and pass the internet traffic trough pfSense.

          V 1 Reply Last reply Reply Quote 0
          • V
            viragomann @stefan.bendler
            last edited by

            @stefan-bendler said in Reverse proxy https name resolution:

            I can only use pfSense with one network card.

            As I mentioned, it's an uncommon setup, but it can work this way. You have to forward http+s traffic to this IP.

            On pfSense itself and in HAproxy this doesn't need any special settings at all. So I would expect this to work if you have configured HAproxy normally.
            What do you get in the stats?

            Maybe you can share your haproxy settings.

            1 Reply Last reply Reply Quote 0
            • S
              stefan.bendler
              last edited by

              This post is deleted!
              V 1 Reply Last reply Reply Quote 0
              • V
                viragomann @stefan.bendler
                last edited by

                @stefan-bendler
                If you go to the settings page in HAproxy you can find a button at the bottom to display the whole configuration and would also give information about your backend settings.
                From the given information it's not clear to me, what you intend to achieve and what's not working.

                I'm wondering, if you're using a public IP inside your network.
                If this is your public external IP you may want to hide it.

                From your screenshots, I assume the http is working as expected, but for the https obviously gives you the pfSense web GUI.
                Is the web configurator listening on the same port as the HAproxy frontend? If so you can change it in System > Advanced > Administration.

                1 Reply Last reply Reply Quote 0
                • S
                  stefan.bendler
                  last edited by

                  This post is deleted!
                  1 Reply Last reply Reply Quote 0
                  • First post
                    Last post
                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.