Help Wanted: Accessing a Service With the Same FQDN Inside and Outside Local Network

https://piefed.ca/c/selfhosted/p/526486/help-wanted-accessing-a-service-with-the-same-fqdn-inside-and-outside-local-network

Help Wanted: Accessing a Service With the Same FQDN Inside and Outside Local Network

I am pulling my hair out and need help. I'm going to try to be as thorough as possible. **The Goal** : To use `sub.domain.tld` to access a ser…

When connected to your internal network, what is the results of:

nslookup sub.domain.tld AGH.IP.Address

This should respond authoritative with the IP you need to access NPM’s VIP IP address. If that is not the case, let us see your AGH configuration for your sub.domain.tld.

If that does return the correct IP, verify that it responds to https using curl on Linux or windows (replace curl with curl.exe)

curl -vvvI sub.domain.tld

If this is not connecting or showing a cert error then there’s a misconfiguration on the NPM side. Screenshots of your site configuration for one of the sites would be helpful. The domain name should match sub.domain.tld (not your duckdns) and be bound to the let’s encrypt cert.

nslookup sub.domain.tld AGH.IP.Address

This should respond authoritative with the IP you need to access NPM’s VIP IP address.

That returns a non-authoritive answer only, but the address is Unraid.IP.Address (which NPM is running on). Here’s the AGH rewrite I’m trying:

Here is the result of the curl:

21:55:55.862001 [0-x] * [READ] client_reset, clear readers 21:55:55.863057 [0-0] * Host sub.domain.tld:443 was resolved. 21:55:55.863116 [0-0] * IPv6: (none) 21:55:55.863146 [0-0] * IPv4: Unraid.IP.Address 21:55:55.863183 [0-0] * [HTTPS-CONNECT] adding wanted h2 21:55:55.863234 [0-0] * [HTTPS-CONNECT] added 21:55:55.863274 [0-0] * [HTTPS-CONNECT] connect, init 21:55:55.863330 [0-0] * Trying Unraid.IP.Address:443... 21:55:55.863396 [0-0] * [HTTPS-CONNECT] connect -> 0, done=0 21:55:55.863447 [0-0] * [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0 21:55:55.863518 [0-0] * [HTTPS-CONNECT] adjust_pollset -> 0, 1 socks 21:55:55.863576 [0-0] * [HTTPS-CONNECT] connect -> 0, done=0 21:55:55.863625 [0-0] * [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0 21:55:55.863697 [0-0] * [HTTPS-CONNECT] adjust_pollset -> 0, 1 socks 21:55:55.863792 [0-0] * connect to Unraid.IP.Address port 443 from My.PC.IP.Address port 57824 failed: Connection refused 21:55:55.863894 [0-0] * Failed to connect to sub.domain.tld port 443 after 1 ms: Could not connect to server 21:55:55.863985 [0-0] * [HTTPS-CONNECT] connect, all attempts failed 21:55:55.864043 [0-0] * [HTTPS-CONNECT] connect -> 7, done=0 21:55:55.864094 [0-0] * [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 7, done=0 21:55:55.864163 [0-0] * [HTTPS-CONNECT] Curl_conn_connect(), filter returned 7 21:55:55.864231 [0-0] * [WRITE] [OUT] done 21:55:55.864268 [0-0] * closing connection #0 curl: (7) Failed to connect to sub.domain.tld port 443 after 1 ms: Could not connect to server