OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • English Forums »
  • General Discussion »
  • HA Proxy Reverse Proxy Help [solved]
« previous next »
  • Print
Pages: [1]

Author Topic: HA Proxy Reverse Proxy Help [solved]  (Read 3803 times)

docb

  • Jr. Member
  • **
  • Posts: 57
  • Karma: 3
    • View Profile
HA Proxy Reverse Proxy Help [solved]
« on: April 04, 2018, 10:17:09 pm »
EDIT: Now it works with this configuration. After some reboots and leaving everything as it is for 1 day it works.  ;D Sometimes they have their own life ;-)

Hi,
I have followed several guides to set up a reverse proxy with ha proxy but I am not sucessfull (e.g. https://docs.opnsense.org/manual/how-tos/haproxy.html, https://www.frankysweb.de/exchange-2016-opnsense-haproxy-und-lets-encrypt/). Unfortunately they do not refer to ha proxy 2.6 but I think I've managed to "translate" some of the descriptions (i.a. ACL -> Rules).
If I use NAT, I can reach my webserver from the internet, but not with HA Proxy. Could someone please look over my config and tell me where my error is?
Firewall -> Rules -> WAN -> ICPv4TCP * * * 80 (HTTP) *      [should allow any http traffic to any destination]
Services -> HAProxy -> Configuration:
  • 1. Real Server
  • Name: us80
  • FQDN or IP: 192.168.2.4 (this is where my apache is reachable
  • Port: 80
  • SSL: unchecked
  • Verify SSL: unchecked
  • 2. Virtual Services -> Backend Pool
  • Name: us80_backend
  • Mode: HTTP (Layer7) default
  • Balancing Algorythm: Source-IP Hash default
  • Server: us80
  • nothing else changed
  • 3. Rules & Checks -> Conditions
  • Name: us80_acl
  • Condition type: Path starts with
  • Negate condition: unchecked
  • Path Prefix: /*
  • 4. Rules & Checks -> Rules
  • Name: us80_rule
  • Test type: IF default
  • Logical operator: AND default
  • Execute function: use specified Backend Pool
  • Use backend pool: us80_backend
  • 5. Virtual Services -> Public Services
  • Name: us80_public
  • Listen Addresses: 127.0.0.1:80, 192.0.0.2:80 (WAN Address, I've tried it with only this address too, also 0.0.0.0:80 did not work)
  • Type: HTTP / HTTPS (SSL offloading) default
  • Default Backend Pool: us80_backend
  • Select rules: us80_rule (does not work without rule either
  • nothing else changed

I am thankful for any hints!



« Last Edit: April 07, 2018, 11:14:27 am by docb »
Logged

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • English Forums »
  • General Discussion »
  • HA Proxy Reverse Proxy Help [solved]
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2024 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2