Hey Guys,
i am from Germany and need your help… I am new to HAProxy.
I tried the folowing setup and failed hardly, i read through this forum and through the documentation, and cant really figure out, what my problem is.
Following Scenario:
We have multiple Sites. All Sites have a Synology NAS (DDNS) behind a Firewall. We want people to access the Synology Photostation, without getting easily the IP of the Site.
We have one main Site with a PfSense Firewall. The IP Adress of this Site is not rly Critical, so we can expose this IP.
Lets take for given:
Site 1: Main Site with domain main.help.me
Site 2: site2.de
Site 3: site3.de
Site 4: site4.de
Site 5: site5.de
Site 6: site6.de
Site 7: site7.de
So our preffered Route would be:
The Customer types: site2.main.help.me → PfSenseFirewall → HAProxy → site2.de:12345
All Firewalls have been configured correctly and also have been NATTED (Where it needed to be done). I am quite familiar with Firewalls and rules, so the issue is not here.
We configured the PfSense HAProxy Frontend like this:
WANadress Port 443 with SSL Offloading
ACL Frontend:
site2.main.help.me use Backend site2
site3.main.help.me use Backend site3
site4.main.help.me use Backend site4
site5.main.help.me use Backend site5
site6.main.help.me use Backend site6
site7.main.help.me use Backend site7
We configured multiple Backends like this:
Backend Site2:
Server site2.de Port 12345 Encrypt SSL Name Site2
Thats it…
We either dont get a connection at all, or when we play arround with the settings we get a Error 400.
I really thought it would be just as “easy” as it sounds… but thats why i am here now, to learn how it should be done correctly
Pls tell me what you think about it, what you would do different (and why), and where my thinking is wrong