OPNsense

505 readers

1 users here now

All discussions about the open source, FreeBSD-based firewall called OPNsense.

founded 1 year ago

MODERATORS

IceBearCushion

Port forward to different IP based on destination address (self.opnsense)

submitted 7 months ago by doctorzeromd to c/opnsense

9 comments fedilink hide all child comments

Hello all you lovely people!

I'm trying to figure out if I can port forward to different servers based on the destination domain.

I have a domain with a wildcard cert and I'd like to be able to route all traffic headed towards "1.domain.com" to a server I'm calling "1". I'd still like traffic headed to domain.com to go to where it's currently going, we can call this server "0", and to be able to have a 2.domain.com or 3 or 4 in the future.

I thought that having a port forward rule with: interface: WAN Protocol: any source: any destination: a url alias including 1.domain.com redirect target ip: local ip

Would work, but it doesn't seem to. Any tips?

you are viewing a single comment's thread
view the rest of the comments

[–] knF 4 points 7 months ago* (last edited 7 months ago)

I think you can achieve it with a reverse-proxy. Let's say that domain.com points at server 0, you'll have to put a reverse proxy that answers all calls. In the config of the reverse proxy you'll have to redirect the services based on the domain. I'm using Caddy and this example should work:

0.domain.com {
                        reverse_proxy http://X.X.X.X:8080
                      }
1.domain.com {
                        reverse_proxy http://Y.Y.Y.Y:8123
                        }

And so on.

EDIT: Looks like I was late to the party! +1 to @greco reply as it's more complete and clear (especially on the risks of this approach)