Hi.

We using Linux CentOS.

For example - we have 3 hosts - host1.domain.com, host2.domain.com, host3.domain.com. Hosts connected via VPN.

Task: host1.domain.com must be a gateway for http/https traffic, and redirect requestes to host2.domain.com and host3.domain.com.

host1.domain.com will have external IP and accepts request on 80 port.

host2.domain.com and host3.domain.com - internal IP and accepts request on 8080 and 8443 ports.

How this can be realised? IPTABLES, NGINX, something else?

And - what about other traffic? SSH, samba etc.

Thanks.

Check this website have explanation to configure nginx as reverse proxy.
http://www.cyberciti.biz/tips/using-...rse-proxy.html

Do you need SSH and Samba access via your external IP? if not just restrict SSH and Samba access on your local network only.

1 members found this post helpful.

Thanks, @kirukan - I'm also assume to use NGINX to redirect HTTP traffic.

But also - I want to redirect SSH, MySQL and Oracle traffic from external network - to internal servers in this VPN network. Can it be done?

For examle - I'm in external network and want open connection to MySQL database servers in this VPN network.

Lets assume that MySQL server #1 have IP 10.0.0.2 (internal) and MySQL server #2 have IP 10.0.0.3 (internal).

host1.domain.com - have IP 77.120.120.77 (external) and 10.0.0.1 (internal).

I want to have ability open connection to MySQL server #1 via request like "open host2.domain.com:3306" and MySQL server #2 via request like "open host3.domain.com:3306".

Thanks for tips.

Let me draw a picture about your setup. I guess you would like to setup a web-based application by using Nginx, Apache, Mysql/Oracle. So here Nginx is going to be a reverse proxy, Apache is the middleware and Mysql/Oracle are the Back-end.

As per your earlier posts all these servers are in your internal network so Nginx, Apache and Mysql/Oracle can talk each other.

Configure the external IP in nginx. whoever access your web application from internet they first hit nginx then nginx will handle those HTTP/HTTPS connections.

So you don't want to expose your real web application and database servers to public.

If I am wrong make it bit more clear about your questions...

Not exactly. Web-application (Tomcat in fact) - it is one story.

Other applications (database servers, LDAP, SSH access) - other one.

So, speaking about MySQL access - means that I want really open direct connection to different MySQL (or any other service) servers in internal - from external network.