haproxy port 443 questions

[0xDEADC0DE]

I have some difficulties setting up haproxy in this configuration:

WAN access to port 443 https distributes access to different backend servers depending on domain name is working.
LAN access to port 443 for OPNsense GUI doesn't work.
I can access it when I change it to e.g. port 9999.
How can I configure this setup? Is it even possible?

[mahescho]

I've not tested this yet, but I think you got hit by the problem I've asked a few days ago about. See @franco s answer here:

https://forum.opnsense.org/index.php?topic=9788.msg44768#msg44768

I think HAproxy binds to 443 on all interfaces. @franco suggested to me to do the configuration manually to make HAproxy (in my case NginX) to one ore more interfaces and not to all.

IMHO making service binds configurable should be # 1 on the list of development todos

[0xDEADC0DE]

I think I will try to use port 9999 and redirect from 443 to 9999 with haproxy.
Perhaps it works.

Is there a good explanation between the two modes "http / https" and "https tcp"?