OPNsense

455 readers

1 users here now

All discussions about the open source, FreeBSD-based firewall called OPNsense.

founded 1 year ago

MODERATORS

IceBearCushion@lemmy.world

Port forward to different IP based on destination address (lemmy.world)

submitted 5 months ago by doctorzeromd@lemmy.world to c/opnsense@lemmy.world

1 comments fedilink hide all child comments

Hello all you lovely people!

I'm trying to figure out if I can port forward to different servers based on the destination domain.

I have a domain with a wildcard cert and I'd like to be able to route all traffic headed towards "1.domain.com" to a server I'm calling "1". I'd still like traffic headed to domain.com to go to where it's currently going, we can call this server "0", and to be able to have a 2.domain.com or 3 or 4 in the future.

I thought that having a port forward rule with: interface: WAN Protocol: any source: any destination: a url alias including 1.domain.com redirect target ip: local ip

Would work, but it doesn't seem to. Any tips?

top 1 comments

sorted by: hot top controversial new old

[–] sardaukar@lemmy.world 0 points 5 months ago* (last edited 5 months ago)

I couldn't do this with OPNSense, but you can do it with nginx, without TLS termination https://nginx.org/en/docs/stream/ngx_stream_ssl_preread_module.html I just used a separate Linux VM for it

Wrote a blog post today with a working example https://blog.nootch.net/post/my-home-network-setup-in-2024/