skip to Main Content

I have in my home env two systems:

  • a Docker server on 10.0.0.10/16, using Traefik reverse proxy with one of my public domains
  • and a kubernetes cluster with VIP on 10.0.0.201/16, with Nginx and supposedly with another of my public domains
    my firewall is pfsense, I have reverse proxy installed; certificates are managed by nginx /traefik on docker /k8s

How can I configure pfsense to direct domainA traffic to the Docker host and DomainB to the k8s-one? (no need for it do do ACME, just directing the traffic…)

A step by step guide, or maybe some pointer to a good guide would be much appreciated…

Thanks,
G

Tried setting up reverse proxy on pfsense, but clearly missing some bits

2

Answers


  1. You can not do it in L4 port forwarding since TCP is not aware of hostname/domain you mentioned. those are in L7 so You need to use something at L7 like HAproxy which pfsense has it in the packages.

    Login or Signup to reply.
  2. You need to:

    1. Enable Haproxy on pfsense
    2. Create a frontend on your 80,443 ports.
    3. Create two backends pointing to docker and k8s environments.
    4. Write ACLs in your frontend to point traffic to specific backend, according to hostname and SNI(for ssl).
    Login or Signup to reply.
Please signup or login to give your own answer.
Back To Top
Search