Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.networking > #1173

Re: multi domains, single IP

Show key headers only | View raw

Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> wrote in news:jjtg50
$lmp$1@saria.nerim.net:

> Hello,
> 
> buck a écrit :
>> I know it is possible to do this on a single computer.  What I need 
to 
>> know is if it is possible to have each domain be specific to its 
own 
>> computer, and how to accomplish that.
>> 
>> There is only one WAN IP address available.
>> 
>> The setup is that one (Slackware) box's eth1 is connected to the 
ISP 
>> (WAN) while its eth0 is connected to a switch (LAN, with 192.168 
IPs).  
>> Obviously, only one WAN connection is possible. 
> 
> What do you mean ?

It is not possible to connect more than one computer to the WAN.  
Conflicts occur otherwise; the OS complains that more than one 
computer has the same IP.

 >> At this time, there are 3 domains using that IP.
> 
> Do you mean 3 domain names with DNS address ressource records 
pointing
> to that address ?

Yes,
 
>> I tried to use iptables' "string" match in the nat table to 
redirect 
>> incoming packets to the LAN IP of the computer indicated by the 
domain 
>> name.  "-m string --string DOMAIN.NAME -j DNAT" in PREROUTING 
doesn't 
>> work; the domain string is not matched.
> 
> That cannot work. The nat chains, where you can use the DNAT target, 
see
> only the first packet (SYN) of a connection, which does not contain 
any
> data. The target host name is contained is a subsequent packet, but 
then
> it is too late, the NAT mapping cannot be changed.
> 
>> The only required services for each of these domains are ftp and 
http.  
>> More specifically, domain A needs to provide ftp and http, domain B 
>> needs ftp, http, rsync & ssh; domain C needs those and more.
> 
> For HTTP 1.1, you need a reverse proxy. For other protocols such as 
FTP,
> the only "solution" is to use a different address or port with each
> domain name : unlike HTTP, these protocols do not advertise the 
targed
> host name in the payload.
> 
>> Am I doomed to having these services all be on the Slackware box?
> 
> The problem would be the same on a single box.

No, it isn't.  I can set up Apache for any number of domains.  Same 
with the ftp server.  SSH can be run on different ports so there can 
be 3 running instances...
--
buck 

Back to comp.os.linux.networking | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

multi domains, single IP buck <buck@private.mil> - 2012-03-15 15:45 +0000
  Re: multi domains, single IP Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-03-15 20:32 +0100
    Re: multi domains, single IP buck <buck@private.mil> - 2012-03-15 20:54 +0000
      Re: multi domains, single IP Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-03-15 23:05 +0100
        Re: multi domains, single IP buck <buck@private.mil> - 2012-03-16 18:29 +0000
          Re: multi domains, single IP Chris Davies <chris-usenet@roaima.co.uk> - 2012-03-16 21:09 +0000
            Re: multi domains, single IP unruh <unruh@invalid.ca> - 2012-03-16 23:42 +0000
              Re: multi domains, single IP Chris Davies <chris-usenet@roaima.co.uk> - 2012-03-17 09:30 +0000
            Re: multi domains, single IP buck <buck@private.mil> - 2012-03-17 17:47 +0000
              Re: multi domains, single IP Chris Davies <chris-usenet@roaima.co.uk> - 2012-03-18 09:14 +0000
  Re: multi domains, single IP Chris Davies <chris-usenet@roaima.co.uk> - 2012-03-15 22:16 +0000
    Re: multi domains, single IP Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-03-16 00:35 +0100
      Re: multi domains, single IP Chris Davies <chris-usenet@roaima.co.uk> - 2012-03-16 09:03 +0000
    Re: multi domains, single IP Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2012-03-16 09:11 +0200
      Re: multi domains, single IP buck <buck@private.mil> - 2012-03-16 18:41 +0000

csiph-web