OPNsense

491 readers

1 users here now

All discussions about the open source, FreeBSD-based firewall called OPNsense.

founded 1 year ago

MODERATORS

[email protected]

Port forward to different IP based on destination address (lemmy.world)

submitted 6 months ago by [email protected] to c/[email protected]

9 comments fedilink hide all child comments

Hello all you lovely people!

I'm trying to figure out if I can port forward to different servers based on the destination domain.

I have a domain with a wildcard cert and I'd like to be able to route all traffic headed towards "1.domain.com" to a server I'm calling "1". I'd still like traffic headed to domain.com to go to where it's currently going, we can call this server "0", and to be able to have a 2.domain.com or 3 or 4 in the future.

I thought that having a port forward rule with: interface: WAN Protocol: any source: any destination: a url alias including 1.domain.com redirect target ip: local ip

Would work, but it doesn't seem to. Any tips?

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 1 points 6 months ago* (last edited 6 months ago)

I couldn't do this with OPNSense, but you can do it with nginx, without TLS termination https://nginx.org/en/docs/stream/ngx_stream_ssl_preread_module.html I just used a separate Linux VM for it

Wrote a blog post today with a working example https://blog.nootch.net/post/my-home-network-setup-in-2024/