NGINX streaming traffic

Started by collinsit, February 18, 2025, 01:14:52 AM

Previous topic - Next topic
I currently run NGINX on a Linux VM and have been using it that way for years and it works well. I just moved from PFSense to OpnSense and really like OpnSense better and love the fact that there is an NGINX plugin for it, there wasn't in PFSense.

I have worked on moving my setup from the Linux VM to the OpnSense plugin and got most things working ok. There were some challenges as I had options setup on the VM in the config files that I couldn't seem to duplicate in the GUI of OpnSense so not sure how necessary they will all be. The main issue I have run into is with the streaming module and one particular service.

The setup is pretty basic, it has a web interface and then a couple other TCP ports for transferring data. I setup the web port no problem and when I enable the other ports on the streaming module they seem fine but aren't working properly. The strange part is I can telnet to these ports remotely and it connects but when I try to programmatically connect through them, it doesn't work. Another strange part is, if I leave the web portion enabled and just try to directly NAT these ports, ideally not going through the NGINX it still doesn't work. If I disable NGINX and do it all with direct NAT or through the Linux NGINX it works perfectly.

I am not sure if the NGINX box is intercepting all traffic on that hostname regardless of the port and that is why direct NAT isn't working with it enabled and not sure why telnet works to those ports but the communication doesn't properly.

Does anyone have any suggestions at what the issue might be or how to even start troubleshooting it? It would be nice to terminate all these connections at the firewall and direct them appropriately from there but I am not sure why this part isn't working. I have a few other services running over the streaming module on different servers and they all work fine, it is just this one that isn't.

Any help would be really appreciated.