OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • Archive »
  • 18.7 Legacy Series »
  • haproxy port 443 questions
« previous next »
  • Print
Pages: [1]

Author Topic: haproxy port 443 questions  (Read 2506 times)

0xDEADC0DE

  • Newbie
  • *
  • Posts: 47
  • Karma: 1
    • View Profile
haproxy port 443 questions
« on: September 30, 2018, 01:35:52 pm »
I have some difficulties setting up haproxy in this configuration:

WAN access to port 443 https distributes access to different backend servers depending on domain name is working.
LAN access to port 443 for OPNsense GUI doesn't work.
I can access it when I change it to e.g. port 9999.
How can I configure this setup? Is it even possible?
Logged

mahescho

  • Jr. Member
  • **
  • Posts: 59
  • Karma: 2
    • View Profile
Re: haproxy port 443 questions
« Reply #1 on: September 30, 2018, 02:08:09 pm »
I've not tested this yet, but I think you got hit by the problem I've asked a few days ago about. See @franco s answer here:

https://forum.opnsense.org/index.php?topic=9788.msg44768#msg44768

I think HAproxy binds to 443 on all interfaces. @franco suggested to me to do the configuration manually to make HAproxy (in my case NginX) to one ore more interfaces and not to all.

IMHO making service binds configurable should be # 1 on the list of development todos :)
Logged
OPNsense 21.1.2-amd64
FreeBSD 12.1-RELEASE-p13-HBSD
OpenSSL 1.1.1j 16 Feb 2021

0xDEADC0DE

  • Newbie
  • *
  • Posts: 47
  • Karma: 1
    • View Profile
Re: haproxy port 443 questions
« Reply #2 on: October 01, 2018, 12:01:17 am »
I think I will try to use port 9999 and redirect from 443 to 9999 with haproxy.
Perhaps it works.

Is there a good explanation between the two modes "http / https" and "https tcp"?
Logged

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • Archive »
  • 18.7 Legacy Series »
  • haproxy port 443 questions
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2023 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2