Need some assistance with pfsense and haproxy. I can view the domain internally, but when i try to view it externally it times out. I’m thinking it’s some nat rule causing this but don’t know how to trouble shoot (i have it pointing to a virtual ip). Also i can’t figure out how to get the logs out of pfsense/haproxy to determine where the error is generating from. when i try to ping the domain within pfense everything looks fine no packet loss. it’s just doesn’t seem to redirect to the appropriate ip.
the tutorial i followed which works internally for my domain, but can’t figure out why its not working externally.
HAPROXY 1.8.30-c248dab
PFSENSE 2.5.2-RELEASE
# Generated on: 2021-09-02 17:35
global
maxconn 1000
stats socket /tmp/haproxy.socket level admin expose-fd listeners
uid 80
gid 80
nbproc 1
nbthread 1
hard-stop-after 15m
chroot /tmp/haproxy_chroot
daemon
tune.ssl.default-dh-param 2048
server-state-file /tmp/haproxy_server_state
listen HAProxyLocalStats
bind 127.0.0.1:2200 name localstats
mode http
stats enable
stats admin if TRUE
stats show-legends
stats uri /haproxy/haproxy_stats.php?haproxystats=1
timeout client 5000
timeout connect 5000
timeout server 5000
frontend http_redirect
bind 192.168.1.xxx:80 name 192.168.1.xxx:80
mode http
log global
option http-keep-alive
option forwardfor
acl https ssl_fc
http-request set-header X-Forwarded-Proto http if !https
http-request set-header X-Forwarded-Proto https if https
timeout client 30000
http-request redirect scheme https
frontend HTTPS_443
bind 192.168.1.xxx:443 name 192.168.1.xxx:443 ssl crt-list /var/etc/haproxy/HTTPS_443.crt_list
mode http
log global
option http-keep-alive
option forwardfor
acl https ssl_fc
http-request set-header X-Forwarded-Proto http if !https
http-request set-header X-Forwarded-Proto https if https
timeout client 30000
acl <Domain1> var(txn.txnhost) -m beg -i <Domain1>
http-request set-var(txn.txnhost) hdr(host)
use_backend <Domain1> if <Domain1>
backend <Domain1>
mode http
id 100
log global
option log-health-checks
timeout connect 30000
timeout server 30000
retries 3
option httpchk GET /
server <Domain1> 192.168.1.xxx:PORT id 101 check inter 1000
1 post - 1 participant