Setup HAProxy - ACL with SourceIP
-
Hello everyone,
I'm curious if its possible to make an AND Condition in HA Proxy. I have only one Frontend but several backens that should only be accessable by only one specific Source IP while other backends can be accessed by everyone. That I need to create an ACL to use the backend is sure, but reading
acl's are no longer combined with logical AND operators, list multiple acl's below where needed.means to me I need to make a different approach.
Do I need to set in the Access Control List a custom acl and write it on my own or is there a GUI way of doing it?
-
@Gamienator-0
Just enter all ACLs for your condition into the "Condition acl names" box of the action, separated by spaces. -
This post is deleted! -
Thank you very much! Now I have to find out a way for using the pfSense Aliases.
-
@Gamienator-0
Aliases can be used straight forward in ACLs.
For instance to use an alias for some IPs, set the ACL expression to "Source IP matches IP or Alias" and enter the alias for the value.