One WAN IP to LAN Web Servers

tim.mcmanus

I apologize if the answer to this question is obvious, but I figured I'd ask it since I can't figure it out.

I have one WAN IP address -> pfSense 1.2.3 appliance -> two Web servers.

Right now I have the WAN port 80 routing to Web1. It hosts several web sites and domain names including www.example.com (not the real address, but www routes here). I want to separate sharepoint.example.com and route that to another web server on the LAN.

Can I route subdomains and port 80 to a Web2 while hosting everything else on Web1?

For example:

*.example.com:80 -> Web1:80
sharepoint.example.com:80 -> Web2:80

I just wondering how I can accomplish this with my pfSense box or if I have to set up a Web proxy. I would prefer to do it on the pfSense box because I may be adding more web servers in the future.

Thanks!

jimp

You need a proxy for that, you can't forward a single port to multiple internal machines.

Only an HTTP proxy (Like apache+mod_security or similar) could take the connection, read the HTTP host header, and then direct the connection inward.

tim.mcmanus

Yuk, I was hoping that there was something in pfSense that would let me do it.

Okay, if I need to set up a Web proxy, that's easy enough on apache.

Thanks for the prompt reply.

EDIT: Has anyone used the ProxyServerModSecurity package? http://doc.pfsense.org/index.php/ProxyServerModSecurity_package

It might do the trick but it's an alpha release.

jimp

I thought someone did some work on it recently to make it work, though I haven't tried it myself.