Quantcast
Channel: HAProxy community - Latest topics
Viewing all articles
Browse latest Browse all 4744

Unable to access domain externally

$
0
0

Need some assistance with pfsense and haproxy. I can view the domain internally, but when i try to view it externally it times out. I’m thinking it’s some nat rule causing this but don’t know how to trouble shoot (i have it pointing to a virtual ip). Also i can’t figure out how to get the logs out of pfsense/haproxy to determine where the error is generating from. when i try to ping the domain within pfense everything looks fine no packet loss. it’s just doesn’t seem to redirect to the appropriate ip.

the tutorial i followed which works internally for my domain, but can’t figure out why its not working externally.

HAPROXY 1.8.30-c248dab
PFSENSE 2.5.2-RELEASE
# Generated on: 2021-09-02 17:35
global
	maxconn			1000
	stats socket /tmp/haproxy.socket level admin  expose-fd listeners
	uid			80
	gid			80
	nbproc			1
	nbthread			1
	hard-stop-after		15m
	chroot				/tmp/haproxy_chroot
	daemon
	tune.ssl.default-dh-param	2048
	server-state-file /tmp/haproxy_server_state

listen HAProxyLocalStats
	bind 127.0.0.1:2200 name localstats
	mode http
	stats enable
	stats admin if TRUE
	stats show-legends
	stats uri /haproxy/haproxy_stats.php?haproxystats=1
	timeout client 5000
	timeout connect 5000
	timeout server 5000

frontend http_redirect
	bind			192.168.1.xxx:80 name 192.168.1.xxx:80   
	mode			http
	log			global
	option			http-keep-alive
	option			forwardfor
	acl https ssl_fc
	http-request set-header		X-Forwarded-Proto http if !https
	http-request set-header		X-Forwarded-Proto https if https
	timeout client		30000
	http-request redirect scheme https 

frontend HTTPS_443
	bind			192.168.1.xxx:443 name 192.168.1.xxx:443   ssl crt-list /var/etc/haproxy/HTTPS_443.crt_list  
	mode			http
	log			global
	option			http-keep-alive
	option			forwardfor
	acl https ssl_fc
	http-request set-header		X-Forwarded-Proto http if !https
	http-request set-header		X-Forwarded-Proto https if https
	timeout client		30000
	acl			<Domain1> var(txn.txnhost) -m beg -i <Domain1>
	http-request set-var(txn.txnhost) hdr(host)
	use_backend <Domain1>  if  <Domain1> 
	

backend <Domain1>
	mode			http
	id			100
	log			global
	option			log-health-checks
	timeout connect		30000
	timeout server		30000
	retries			3
	option			httpchk GET / 
	server			<Domain1> 192.168.1.xxx:PORT id 101 check inter 1000  

1 post - 1 participant

Read full topic


Viewing all articles
Browse latest Browse all 4744

Trending Articles