PFSense LoadBalancer on LAN, for LAN

  • Hi,

    I'm trying to setup an internal load balancer for some of our webservers by using an internal IP on our PF box (this might be entirely mental, I'm just trying to see if it'll actually work). Our PF is on for "gateway" and I've added as an alias.

    The test box I've got has WAN and LAN. I've added a load balancer with IP address, port 80, and added the two internal servers ( and to the pool. Both .1.1 and 1.2. are running apache, if I whack into a browser it'll work. However if I try it doesn't work.

    I've also added a firewall rule (I'm 90% sure this isn't needed as we have an all traffic whitelist rule) for permit the destination or responds to ping, but not HTTP. I've done a traffic capture on my desktop and the TCP handshake is never completed.

    I can't see any drops or similar in the system logs.

    I presume I'm missing something to make this actually work/fundamentally misunderstanding something important?

    Can anyone shed any light on this?

    Many Thanks,

    I've just tested this on our local PF box (2 LANS, and and the balancer appears to work from a box on LAN 2 with the IP listening on and pointing to a pool of and from LAN2.

    This sort of implies they only work across two different interfaces, unless I'm missing something?

  • Hi all,

    I'm hoping to get this thread going again if possible? - after reading the forum rules I thought it better to try here again before creating a new thread.

    I'd like to create a LoadBalancer for a dev domain for exchange 2010 CAS for use with IIS is this possible?
    I could do with some outline steps to get me going laong the lines of:

    create LAN NIC with static IP in LAN address range (

    create WAN NIC with static IP of

    add vIP on LAN interface with static IP

    create port alias for exchange port range (1-65535)

    add CAS01 to server pool

    add CAS02 to server pool


    (I've done most of the above and its not working - but happy to scrap all and start again if needed)
    thanks in advance


Log in to reply