Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Multiple web servers behind PFsense

    Scheduled Pinned Locked Moved NAT
    11 Posts 4 Posters 16.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • U
      userkiller
      last edited by

      Hi im running a solusvm, one control server and one Hypervisor, the Hypervisor will host atleast 100 vps.

      Currently i have set up the dhcp and an a static routing to the server ip. What else do i need to do to finished the configuration?
      The master control server uses port 5353 but when i try to log in it doesn't work.
      My internal ip is 10.0.0.12 for my server.

      Thanks in advance I'm in love with pfsense and its community.

      1 Reply Last reply Reply Quote 0
      • U
        userkiller
        last edited by

        Bump can someone help me :/

        1 Reply Last reply Reply Quote 0
        • C
          cmb
          last edited by

          If you can describe what you're trying to accomplish, someone can probably provide suggestions.

          @userkiller:

          What else do i need to do to finished the configuration?

          to accomplish what?

          1 Reply Last reply Reply Quote 0
          • U
            userkiller
            last edited by

            Im trying to host around 30 VPS (web servers) with one single public ip. giving the vps local ips and doing a nat to forward the traffic how can i acheive this?

            1 Reply Last reply Reply Quote 0
            • marcellocM
              marcelloc
              last edited by

              You will need a reverse proxy server for it like squid3, varnish or apache+mod_security

              Treinamentos de Elite: http://sys-squad.com

              Help a community developer! ;D

              1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator
                last edited by

                If you host the different servers on different ports you can do what you want.  But if not using different port for each webserver your going to to need some sort of reverse proxy to forward to your inside based upon the fqdn they are trying to access.  I do believe this can be done via a reverse proxy.

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                1 Reply Last reply Reply Quote 0
                • U
                  userkiller
                  last edited by

                  alright thanks, how can i forward traffic from one public wan into a public ip in the lan1 and lan2?

                  1 Reply Last reply Reply Quote 0
                  • marcellocM
                    marcelloc
                    last edited by

                    Without reserve proxy, you can use pfsense load balance services.

                    Treinamentos de Elite: http://sys-squad.com

                    Help a community developer! ;D

                    1 Reply Last reply Reply Quote 0
                    • U
                      userkiller
                      last edited by

                      marcelloc, do you have msg? i really need to understand this, its for my in depended study class. I'm really stock and i can't seem to find anyone to help me out.

                      Can i just assign a public ip to the interface and set the static configuration on the etho?

                      1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator
                        last edited by

                        What do you not understand??

                        You can not run 30 http servers behind 1 public IP.  Unless you use different ports on the 1 public IP you have.

                        public.IP.80 –> private.1.80
                        public.IP.81 --> private.2.80
                        public.IP.81 --> private.3.80

                        But that method BLOWS because from the public side you would have to put the port in your url like http://www.domainA.tld:80 or http://www.domainB.tld:81, etc..

                        Do you need help understanding NAT?

                        Now with a reverse proxy vs just doing nat or napt it would watch the URL being used and then send it to the inside address.

                        example

                        www.domainA.tld (publicIP.80) ---> private.1.80
                        www.domainB.tld (publicIP.80) ---> private.2.80
                        www.domainC.tld (publicIP.80) ---> private.3.80

                        etc..

                        Load bal would be used if you had multiple sites all serving up the same website and you wanted to distribute the load between them.

                        example

                        www.DomainA.tld (public.IP.80) --> private.1.80
                        www.DomainA.tld (public.IP.80) --> private.2.80
                        www.DomainA.tld (public.IP.80) --> private.1.80
                        www.DomainA.tld (public.IP.80) --> private.2.80

                        etc..

                        If you want to serve up 30 different web servers all on port 80, you need 30 different public IPs.  Or you need to use a reverse proxy to send traffic to the different servers behind the 1 public IP based upon the URL that is being accessed.

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        1 Reply Last reply Reply Quote 0
                        • U
                          userkiller
                          last edited by

                          Nice explanation i know understand that part. My next question is how can i assign a static ip to one interface I'm using the watch guard firebox 550e
                          interface 0 is WAN
                          interface 1 is LAN 1 10.0.1.1
                          i want interface 2 to be a public ip how can i achieve this that's my second biggest problem.

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.