[solved] route issue on connections over site 2 site vpn

[greY]

Hi
I have users connected over a IPSEC site to site VPN. They cannot access web sites behind haproxy (reverse proxy).

I see passing connections in the firewall logs but nothing in the haproxy logs (only local requests). It seems like a kind of issue with routing from requests coming over IPSEC...

Any ideas how to fix / check this?

[mimugmail]

Reverse Proxy runs on the same device as IPSec peer?

[greY]

Reverse Proxy runs on OPNsense.
The infrastructure looks like this:
 site A                                        site B
|OPNsense|                              |Unifi USG |
|              |----IPSEC tunnel-----|               |
|HAproxy  |                              |               |
      |
      |
WEB Services

[mimugmail]

Then you have to add your WAN/32 to IPSec SA

[greY]

Thanks, but please could you describe a bit more exactly what to do ?

[mimugmail]

In Phase2 add local net your WAN adress as network with /32 and remote the other LAN

[greY]

The issue was that haproxy was only listening to 127.0.0.1:port, I added the local router IP:port and everything works.
anyways thanks for helping.