Multiple web servers behind PFsense

userkiller

Hi im running a solusvm, one control server and one Hypervisor, the Hypervisor will host atleast 100 vps.

Currently i have set up the dhcp and an a static routing to the server ip. What else do i need to do to finished the configuration?
The master control server uses port 5353 but when i try to log in it doesn't work.
My internal ip is 10.0.0.12 for my server.

Thanks in advance I'm in love with pfsense and its community.

userkiller

Bump can someone help me :/

cmb

If you can describe what you're trying to accomplish, someone can probably provide suggestions.

@userkiller:

What else do i need to do to finished the configuration?

to accomplish what?

userkiller

Im trying to host around 30 VPS (web servers) with one single public ip. giving the vps local ips and doing a nat to forward the traffic how can i acheive this?

marcelloc

You will need a reverse proxy server for it like squid3, varnish or apache+mod_security

johnpoz

If you host the different servers on different ports you can do what you want. But if not using different port for each webserver your going to to need some sort of reverse proxy to forward to your inside based upon the fqdn they are trying to access. I do believe this can be done via a reverse proxy.

userkiller

alright thanks, how can i forward traffic from one public wan into a public ip in the lan1 and lan2?

marcelloc

Without reserve proxy, you can use pfsense load balance services.

userkiller

marcelloc, do you have msg? i really need to understand this, its for my in depended study class. I'm really stock and i can't seem to find anyone to help me out.

Can i just assign a public ip to the interface and set the static configuration on the etho?

johnpoz

What do you not understand??

You can not run 30 http servers behind 1 public IP. Unless you use different ports on the 1 public IP you have.

public.IP.80 –> private.1.80
public.IP.81 --> private.2.80
public.IP.81 --> private.3.80

But that method BLOWS because from the public side you would have to put the port in your url like http://www.domainA.tld:80 or http://www.domainB.tld:81, etc..

Do you need help understanding NAT?

Now with a reverse proxy vs just doing nat or napt it would watch the URL being used and then send it to the inside address.

example

www.domainA.tld (publicIP.80) ---> private.1.80
www.domainB.tld (publicIP.80) ---> private.2.80
www.domainC.tld (publicIP.80) ---> private.3.80

etc..

Load bal would be used if you had multiple sites all serving up the same website and you wanted to distribute the load between them.

example

www.DomainA.tld (public.IP.80) --> private.1.80
www.DomainA.tld (public.IP.80) --> private.2.80
www.DomainA.tld (public.IP.80) --> private.1.80
www.DomainA.tld (public.IP.80) --> private.2.80

etc..

If you want to serve up 30 different web servers all on port 80, you need 30 different public IPs. Or you need to use a reverse proxy to send traffic to the different servers behind the 1 public IP based upon the URL that is being accessed.

userkiller

Nice explanation i know understand that part. My next question is how can i assign a static ip to one interface I'm using the watch guard firebox 550e
interface 0 is WAN
interface 1 is LAN 1 10.0.1.1
i want interface 2 to be a public ip how can i achieve this that's my second biggest problem.