Port forward to different IP based on destination address in opnsense

https://lemmy.world/post/14180978

Port forward to different IP based on destination address in opnsense - Lemmy.World

cross-posted from: https://lemmy.world/post/14180956 [https://lemmy.world/post/14180956] > Hello all you lovely people! > > I’m trying to figure out if I can port forward to different servers based on the destination domain. > > I have a domain with a wildcard cert and I’d like to be able to route all traffic headed towards “1.domain.com [http://1.domain.com]” to a server I’m calling “1”. I’d still like traffic headed to domain.com [http://domain.com] to go to where it’s currently going, we can call this server “0”, and to be able to have a 2.domain.com [http://2.domain.com] or 3 or 4 in the future. > > I thought that having a port forward rule with: > interface: WAN > Protocol: any > source: any destination: a url alias including 1.domain.com [http://1.domain.com] > redirect target ip: local ip > > Would work, but it doesn’t seem to. Any tips?

use haproxy instead of Port forwards, that should work just fine

I have a reverse proxy, but that won’t do ALL traffic, right? Just http or https?

Like if I want to ssh into the different servers, it won’t handle that, will it?

Reverse-proxies are not necessarily limited to HTTP, but you can set up SSLH in Opnsense to do something similar.

But for SSH you would usually log into one machine and form there do a second SSH connection to other servers in the local network.