Opnsense + haproxy + unbound : 503 error , need help

Started by rookysteed, April 07, 2024, 06:17:37 PM

Previous topic - Next topic
April 07, 2024, 06:17:37 PM Last Edit: April 07, 2024, 08:58:10 PM by ledufinfra
Hello,

i need to setup up my firewall in order to access my internal web sites.
This firewall is below an ISP box.
those web sites are hosted under two network zones : DMZ and WIFI
Access from internet (WAN )  is ok acces is done by my public front end haproxy setup.
But i can't achieve to access those same sites , with the same url (for sure) when i'm in my LAN .
Do you have any setup example for this use case ?

Note : i have setup 3 public frontend in order to server ... internet access, and the other two zones (wifi + dmz)
i'm skilled with HAPRoxy but with opnsense i can't see real log file ... NOSRV line for example ;-)

I notice that for all my websites (unbound is ok because ping give me the correct IP address for each zone ),    are passing throught the INTERCO zone (zone/interface connected to ISP box)  , and accross  DMZ or WIFI (bind to under haproxy frontend) , why ?

Another question : HAProxy do not produce log in /var/log/haproxy ? (so how to debug ?)

thank you.

Edit : sometimes it's work sometimes not , this 24.1 is a weird release , am i alone to have so many issue ?

April 08, 2024, 10:18:57 AM #1 Last Edit: April 08, 2024, 10:22:10 AM by ledufinfra
Reply to my self : the issue was due to ISC DHCP , i have filled with first my opnsense as DNS and 1.1.1.1 ... and bingo roundrobin on those "two DNS server".

So i have 3 bind : one for interco-isp, one for dmz and anther for wifi , and haproxy is ok with unbound and DNS overwrites.
But there is always the problematic of host connected to interco-isp ...
because isc dhcp on interco-isp is actually  giving ISP gateway and DNS on this gateway.