Dear Nimamhd,

How did you managed this? Do you also have one external IP? Forwarding based on host-header in case of port 80 and 443? Did you managed the '/haproxy?stats' part?

I really hope you can help me out though.


KR,
Canefield

Hi,

I've tried this too. I had no luck yet. But the forum is telling me it could be managed with Squid RP, HAProxy as well as Mod_Security (Apache). If you manage one or the others please post you findings and guidance. Perhaps for your environment the Mod_Security is the most obvious one.

See the HAProxy link for further development with Mod_Security from Marcello.

Links:
http://forum.pfsense.org/index.php/topic,52188.0.html (Reverse Proxy)
http://forum.pfsense.org/index.php/topic,49429.0.html (HAProxy)
http://forum.pfsense.org/index.php/topic,49254.0.html (Squid3)
http://forum.pfsense.org/index.php/topic,47962.0.html (Compare)
http://forum.pfsense.org/index.php/topic,47032.0.html (Alternative MS TMG)

Furthermore, if you have valuable input regarding the topics above, please feel free to react.


KR,
Canefield

Marcello,

No problem. Do you have any estimate?


Thanks,
Canefield

Marcello,

Thanks for your responce. I'll wait until you finish. This meets my needs as explained completely?
If it is finished please send me an PM.

Thx,
Canefield

Marcello, any update yet?

Marcello,

Thanks for your responce. I'll wait until you finish. This meets my needs as explained completely?
If it is finished please send me an PM.

Thx,
Canefield

[I have only one external IP!]

Dear all,

Is it possible to configure a remote proxy compatible with Microsoft products like Exchange 2010 (OWA/EDGE) and SharePoint 2010 (SSL)? It is meant to function on the ports 25, 465, 80 and 443. All servers in my test environment are load-balanced and redundant. I have only one external IP!

In my opinion this should not matter, but after testing a lot I can't figure it out.
Which package should I use? I've tried Squid Reverse Proxy, Varnish and HAProxy, but all without any success. Probably my mistake, but anyway no luck so ever.

Has someone any suggestions what to use and how to configure? What package could cache site to speed thing up a bit?

Ex. server infrastructure (LB=Load Balanced, HA= High Available, FO=Fail-Over)
Name: | IP: | Port: | URL: | Comment:
EDGE-01 | 192.168.150.241 /28 (DMZ) | 25, 465 TCP | No URL | LB, HA, FO
EDGE-02 | 192.168.150.242 /28 (DMZ) | 25, 465 TCP | No URL | LB, HA, FO
WEB-01 | 192.168.150.243 /28 (DMZ) | 80. 443 TCP | http://sharepoint.test.com/ | LB, HA, FO
WEB-02 | 192.168.150.244 /28 (DMZ) | 80. 443 TCP | http://sharepoint.test.com/ | LB, HA, FO
CAS-01 | 192.168.75.4 /24 (LAN) | 80. 443 TCP | http://webmail.test.com/ | LB, HA, FO
CAS-02 | 192.168.75.5 /24 (LAN) | 80. 443 TCP | http://webmail.test.com/ | LB, HA, FO



Thanks a lot,
Canefield

Still no luck with pfSense and HAProxy nor HAProxy-Full. I'm still trying to complete the process to make Exchange (with all functionality) and SMTP available in a Load Balanced and Reverse Proxy scheme. Can you/anybody help me out?

Marcello,

I'm using HAProxy version 1.4.20 pkg v 1.0; as far as I know the newest one in the 'Packages'-list.
While configuring I think I make the mismatch. That is because I really can't find a goof how-to on each of the three tabs.

In underneath link a saw a how-to, but whithout luck:
http://conheotiensinh.blogspot.com/2011/12/config-haproxy-with-pfsense-version-201.html
Additional HAProxy LB: http://conheotiensinh.blogspot.com/2011/12/setting-up-high-availability-load.html

Simply the pfSense box adding the suffix doesn't comply; http://192.168.x.y/haproxy?stats
So far I understand I configure this for each Frontend? What Username & Password should I give in?
As far I have read the statistics are only available on the pfSense box; so http://192.168.x.y/haproxy?stats. It doesn't work. I can't see a thing. Furthermore, how to configure '/haproxy?stats' while using multiple Frontends? All linking to the same address?

Thanks,
Canefield

KR,
Canefield

Hey,

An update regarding newer version. Dsverg told me: "If i have time, i'll look you issue."
So we all should have patience

KR,
Canefield

Dear all,

Is there somebody that can help me out? Squid3 Reverse supporting Microsoft Exchange 2010 Outlook Anywhere (formely: RPC over HTTP/S)?


Thanks,
Canefield

Marcello,

I'm using HAProxy version 1.4.20 pkg v 1.0; as far as I know the newest one in the 'Packages'-list.
While configuring I think I make the mismatch. That is because I really can't find a goof how-to on each of the three tabs.

In underneath link a saw a how-to, but whithout luck:
http://conheotiensinh.blogspot.com/2011/12/config-haproxy-with-pfsense-version-201.html
Additional HAProxy LB: http://conheotiensinh.blogspot.com/2011/12/setting-up-high-availability-load.html

Simply the pfSense box adding the suffix doesn't comply; http://192.168.x.y/haproxy?stats
So far I understand I configure this for each Frontend? What Username & Password should I give in?


Thanks,
Canefield

Sorry guys,

Bud for some reason HAProxy doesn't work for me...I've filled in the 'Frontends' as well as the 'Servers'. Can I test or view some logs why it isn't working? How? Has somebody a good screenshot/how-to configure HAProxy?

Furthermore the '/haproxy?stats' is not working, how come? So browsing to my pfSense box (http://192.168.x.y:81/haproxy?stats).


Thanks,
Canefield

Yes, after a couple of tests the following error emerge:

"php: : The command '/usr/local/etc/rc.d/varnish.sh' returned exit code '2', the output was 'kern.ipc.nmbclusters: 65536 sysctl: kern.ipc.nmbclusters: Invalid argument kern.ipc.somaxconn: 16384 -> 16384 kern.maxfiles: 131072 -> 131072 kern.maxfilesperproc: 104856 -> 104856 kern.threads.max_threads_per_proc: 4096 -> 4096 NB: Storage size limited to 2GB on 32 bit architecture, NB: otherwise we could run out of address space. Message from VCC-compiler: Reference to unknown backend 'CANLB' at ('input' Line 55 Pos 28) .backend = CANLB; ---------------------------###########- In director specification starting at: ('input' Line 53 Pos 1) director CA client { ########------------ Running VCC-compiler failed, exit 1 VCL compilation failed'"


Thanks a lot,
Canefield

Dear all,

Does somebody has any suggestions/ideas running or not running pfSense on a virtual environment? I know, it is best to use it as a seperate box indeed, but what happens while virtualized.

Does pfSense support it? How about giving resources to it. How much CPU, RAM should I reserve for it? Because VMware is using a smarter way of resource managent I can only guess such things. Is there a formula?

While installing a noticed pfSense had identified it as a virtual machine/platform. So I suppose it is working perfectly under VMware.
The other reason I post this is because I think on some point something is lacking. For instance; I had a well-working environment with pfSense, Snort, Squid3 en Varnish. Suddenly, while no configurations where been applied or changed, services stoped abruptly without any trace. How reliable is pfSense in VMware vSphere?

Something I really want to make crystal clear...a like pfSense and its features enormous


Thanks in advance,
Canefield

Dear all,

I encounter the same problems...after a couple of days Varnish is stopped and won't come online until a reboot of pfSense. Then again a couple days later the system doesn't respond to my external requests. How come?


Thanks,
Canefield

Dear all,

Is there any pfSense documentation about how-to configure HAProxy (Settings, Frontends and Servers).

In the settings tab there is a 'Maxinum connections'...how many to choose. What system resource is being used? The part about 'Global Advanced pass thru'...what to/may be entered? How to configure the 'Frontends' and 'Servers' in detail? Can I make use of 'Host-Header', URIs or SSL-offloading?


Thanks,
Canefield