Date: Mon, 21 Jan 2008 13:30:00 -0600 From: David DeSimone <fox@verio.net> To: freebsd-pf@freebsd.org Subject: Re: pf how-to: Single public IP --> many private NAT'd HTTPS servers Message-ID: <20080121192959.GA12018@verio.net> In-Reply-To: <4794F117.2000804@polands.org> References: <4794C5A8.8040402@polands.org> <1200904649.33634.9.camel@z60m> <4794CF21.2090606@polands.org> <1200906215.33634.14.camel@z60m> <4794D38C.6020007@polands.org> <20080121175551.GB11928@verio.net> <4794F117.2000804@polands.org>
next in thread | previous in thread | raw e-mail | index | archive | help
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Doug Poland <doug@polands.org> wrote: > > So, is the bottom line, one *cannot* hide multiple (NAT'd) SSL hosts > behind a single public IP? So my only solution, given apache and one > public IP, is a single host listening on 443 and each "domain" would > have to be served as a <Directory></Directory>. e.g., > > https://secure.example.com/webmail/ > https://secure.example.com/subversion/ That is one method; another is to use TCP port numbers to differentiate the servers: https://webmail.example.com:444/ https://subversion.example.com:445/ You can have PF forward the correct port to the correct server. This allows the servers to be more independent of one another. - -- David DeSimone == Network Admin == fox@verio.net "This email message is intended for the use of the person to whom it has been sent, and may contain information that is confidential or legally protected. If you are not the intended recipient or have received this message in error, you are not authorized to copy, dis- tribute, or otherwise use this message or its attachments. Please notify the sender immediately by return e-mail and permanently delete this message and any attachments. Verio, Inc. makes no warranty that this email is error or virus free. Thank you." --Lawyer Bot 6000 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (GNU/Linux) iD8DBQFHlPK3FSrKRjX5eCoRAt+7AKCF/mClCPN5Wzh9mUk8A157esU6hACdG7zD rPZR6UTRRwtJ4KKH/2KPwyI= =g76r -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20080121192959.GA12018>