routing/nating based on http header

mstjohn1974 · 03-02-2009, 02:43 PM

Hi,

I am trying to use iptables to build a firewall that inspects traffic. I want iptables to look at the http header and upon match to route/nat to specific internal ip. for example:

I have two internal webserver and the external domain is mydomain.com. I want to decide all traffic assigned to www.mydomain.com goes to 192.168.1.10 and traffic assigned to users.mydomain.com goes to 192.168.1.15.

Is that possible to do with iptables?

grepmasterd · 03-02-2009, 03:07 PM

why not use virtual servers under apache? it does exactly what you describe.

mstjohn1974 · 03-02-2009, 03:36 PM

I need to have two servers, both in seperate departments

grepmasterd · 03-02-2009, 05:04 PM

ah, different physical servers. not sure it's possible with iptables. I think you want a load balancer of some sort. I'm not sure if squid will perform this trick but something like this might : http://haproxy.1wt.eu

I have no experience with HAProxy so I have no opinion of its capabilities. But it looks pretty cool!