OPNsense Forum

Archive => 24.1, 24.4 Legacy Series => Topic started by: rookysteed on April 07, 2024, 06:17:37 PM

Title: Opnsense + haproxy + unbound : 503 error , need help
Post by: rookysteed on April 07, 2024, 06:17:37 PM
Hello,

i need to setup up my firewall in order to access my internal web sites.
This firewall is below an ISP box.
those web sites are hosted under two network zones : DMZ and WIFI
Access from internet (WAN )  is ok acces is done by my public front end haproxy setup.
But i can't achieve to access those same sites , with the same url (for sure) when i'm in my LAN .
Do you have any setup example for this use case ?

Note : i have setup 3 public frontend in order to server ... internet access, and the other two zones (wifi + dmz)
i'm skilled with HAPRoxy but with opnsense i can't see real log file ... NOSRV line for example ;-)

I notice that for all my websites (unbound is ok because ping give me the correct IP address for each zone ),    are passing throught the INTERCO zone (zone/interface connected to ISP box)  , and accross  DMZ or WIFI (bind to under haproxy frontend) , why ?

Another question : HAProxy do not produce log in /var/log/haproxy ? (so how to debug ?)

thank you.

Edit : sometimes it's work sometimes not , this 24.1 is a weird release , am i alone to have so many issue ?
Title: Re: Opnsense + haproxy + unbound : 503 error , need help
Post by: rookysteed on April 08, 2024, 10:18:57 AM
Reply to my self : the issue was due to ISC DHCP , i have filled with first my opnsense as DNS and 1.1.1.1 ... and bingo roundrobin on those "two DNS server".

So i have 3 bind : one for interco-isp, one for dmz and anther for wifi , and haproxy is ok with unbound and DNS overwrites.
But there is always the problematic of host connected to interco-isp ...
because isc dhcp on interco-isp is actually  giving ISP gateway and DNS on this gateway.