Port forward to different IP based on destination address in opnsense - eviltoast

cross-posted from: https://lemmy.world/post/14180956

Hello all you lovely people!

I’m trying to figure out if I can port forward to different servers based on the destination domain.

I have a domain with a wildcard cert and I’d like to be able to route all traffic headed towards “1.domain.com” to a server I’m calling “1”. I’d still like traffic headed to domain.com to go to where it’s currently going, we can call this server “0”, and to be able to have a 2.domain.com or 3 or 4 in the future.

I thought that having a port forward rule with: interface: WAN Protocol: any source: any destination: a url alias including 1.domain.com redirect target ip: local ip

Would work, but it doesn’t seem to. Any tips?

  • derbolle@lemmy.worldEnglish
    21·
    7 months ago

    use haproxy instead of Port forwards, that should work just fine and works really well on opnsense

    • doctorzeromd@lemmy.worldOPEnglish
      1·
      7 months ago

      I have a reverse proxy, but that won’t do ALL traffic, right? Just http or https?

      Like if I want to ssh into the different servers, it won’t handle that, will it?

      • poVoq@slrpnk.netEnglish
        1·
        7 months ago

        Reverse-proxies are not necessarily limited to HTTP, but you can set up SSLH in Opnsense to do something similar.

        But for SSH you would usually log into one machine and form there do a second SSH connection to other servers in the local network.