HAProxy, error 503
-
I have an IIS server with RDS configured and accessible at rds.mydomain.local, and everything works fine.
Now, I’d like to connect within the LAN and via VPN using a different mapped domain (still local, since I'm connecting via VPN), to prevent clients from accessing the RDS server directly.
For example, instead of rds.mydomain.local, I want to use mysite.intra.net.
Here’s what I’ve configured:
Backend: points to the RDS server on port 443 (I’ve changed pfSense’s default port), with HTTP health check set to GET /healthcheck.html
Frontend: listens on a custom IP on pfSense with port 443 SSL, and uses an ACL to match mysite.intra.net and route to the backend
DNS Resolver: configured to resolve mysite.intra.net to the RDS server
The server seems reachable…
…but when I try to open the page, I get a 503 error.
I’ve tried generating the certificate using both ACME and pfSense's internal CA.Any suggestions?