"
Hi,
first: thanks to all of you for providing a great forum for OPNsense.
We have an installation with HA setup and HA-proxy up and running. The only ting I just can't get to work, is to get the firewall to access it's own ha proxy and the server bhind it.
ha runs on a loopback ip 127.1.2.3 to make it independend of the WAN and LAN interfaces, which might change on failover.
A NAT rule redirects all traffic to WAN 80 and 443 to ´the loopback address.
everything is working perfectly except one thing: when I try to do a configuration backup on the master to our internal nextcloud server: nothing. Make it the slave and it accesses the Nextcloud via the master and it's working.
No matter what I tried, I just can't get it to work.
doing a curl -vvv on the nextcloud server gives something like this:
connect to 111.222.333.444 port 443 from 111.222.333.444 port 59859 failed: Connection refused
The OS is trying to create a connection from the WAN IP to the WAN IP (which is a pppoe device btw.)
And no matter what, there are no log entries for NAT or firewall rules. HA-proxy is seeing nothing, too.
Any idea which checkbox is missing?
Thank you all,
Michael
first: thanks to all of you for providing a great forum for OPNsense.
We have an installation with HA setup and HA-proxy up and running. The only ting I just can't get to work, is to get the firewall to access it's own ha proxy and the server bhind it.
ha runs on a loopback ip 127.1.2.3 to make it independend of the WAN and LAN interfaces, which might change on failover.
A NAT rule redirects all traffic to WAN 80 and 443 to ´the loopback address.
everything is working perfectly except one thing: when I try to do a configuration backup on the master to our internal nextcloud server: nothing. Make it the slave and it accesses the Nextcloud via the master and it's working.
No matter what I tried, I just can't get it to work.
doing a curl -vvv on the nextcloud server gives something like this:
connect to 111.222.333.444 port 443 from 111.222.333.444 port 59859 failed: Connection refused
The OS is trying to create a connection from the WAN IP to the WAN IP (which is a pppoe device btw.)
And no matter what, there are no log entries for NAT or firewall rules. HA-proxy is seeing nothing, too.
Any idea which checkbox is missing?
Thank you all,
Michael
