Virtual Servers

[erickengelke]

I have several OpnSense systems working and liking it.

Now I would like to set up is putting servers on a private LAN connection and use the OPNsense firewall/web server to forward WAN requests to the correct LAN server.

For example, R + free Shiny for web graphics run servers on port 3838.  So I would like to run Shiny on a private LAN server and expose it through a URL redirect through opnsense firewall/web proxy server.

Is this doable with OPNsense?  It's a very powerful model because it allows you to effectively firewall your servers from attacks, traffic shape, etc.

THanks

[fabian]

yes, via HAProxy and nginx (not yet published) plugin. The difference is that HAProxy is intended to be run as a load balancer, while nginx contains WAF functionality (currently NAXSI, maybe mod_security in the future).

[erickengelke]

I looked in the development branch, I guess it's not there yet.

I'd be interested in helping develop this, as my needs are not yet production services.

Erick