This is a discussion on iptables and 2 web servers within the Linux Security forums, part of the System Security and Security Related category; Hi, I have two web servers behind the iptables firewall. In W1 web server, it has a hyperlink pointing to ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
Hi,
I have two web servers behind the iptables firewall. In W1 web server, it has a hyperlink pointing to W2 webserver. W1 is the existing web server, the W2 is under construction. I have no problem redirecting packets from the linux box to the W1, but I have no idea redirectiong packets to W2, since both using port 80. Would any one give me some suggestion? Any help will be appreciated. Jason |
|
|||
|
Jason spilled the following:
> Hi, > > I have two web servers behind the iptables firewall. In W1 web server, it > has a hyperlink pointing to W2 webserver. W1 is the existing web server, > the W2 is under construction. I have no problem redirecting packets from > the linux box to the W1, but I have no idea redirectiong packets to W2, > since both using port 80. > Would any one give me some suggestion? Any help will be appreciated. > AFAIK it is not possible to distribute the traffic between two NATted webservers with the same outside address/port using IPtables. If they will have different addresses visible from outside then it's a dawdle. If they have different *names* then you could setup a reverse proxy on the firewall device (e.g. squid). What are you trying to do - run different stuff on the webservers or load-balance? C. |
|
|||
|
Jason wrote: > Hi, > > I have two web servers behind the iptables firewall. In W1 web server, it > has a hyperlink pointing to W2 webserver. W1 is the existing web server, > the W2 is under construction. I have no problem redirecting packets from > the linux box to the W1, but I have no idea redirectiong packets to W2, > since both using port 80. > Would any one give me some suggestion? Any help will be appreciated. > > Jason > > Check out (AFAIK) a 2.6.x kernel configuration under Network Drivers->Network options->IP: Virtual Server Configuration. I think you might find your answers there. I am currently attempting the same, as I have the carcass of an old Intel e-Commerce server that originally did just what you want, with the added twist of having 2 hardware encryption keys in it. Now, if I can just find drivers for those! Bruce |
![]() |
| Thread Tools | |
| Display Modes | |
|
|