Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.networking > #1172

Re: multi domains, single IP

Show all headers | View raw

Hello,

buck a écrit :
> I know it is possible to do this on a single computer.  What I need to 
> know is if it is possible to have each domain be specific to its own 
> computer, and how to accomplish that.
> 
> There is only one WAN IP address available.
> 
> The setup is that one (Slackware) box's eth1 is connected to the ISP 
> (WAN) while its eth0 is connected to a switch (LAN, with 192.168 IPs).  
> Obviously, only one WAN connection is possible. 

What do you mean ?

> At this time, there are 3 domains using that IP.

Do you mean 3 domain names with DNS address ressource records pointing
to that address ?

> I tried to use iptables' "string" match in the nat table to redirect 
> incoming packets to the LAN IP of the computer indicated by the domain 
> name.  "-m string --string DOMAIN.NAME -j DNAT" in PREROUTING doesn't 
> work; the domain string is not matched.

That cannot work. The nat chains, where you can use the DNAT target, see
only the first packet (SYN) of a connection, which does not contain any
data. The target host name is contained is a subsequent packet, but then
it is too late, the NAT mapping cannot be changed.

> The only required services for each of these domains are ftp and http.  
> More specifically, domain A needs to provide ftp and http, domain B 
> needs ftp, http, rsync & ssh; domain C needs those and more.

For HTTP 1.1, you need a reverse proxy. For other protocols such as FTP,
the only "solution" is to use a different address or port with each
domain name : unlike HTTP, these protocols do not advertise the targed
host name in the payload.

> Am I doomed to having these services all be on the Slackware box?

The problem would be the same on a single box.

Back to comp.os.linux.networking | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

multi domains, single IP buck <buck@private.mil> - 2012-03-15 15:45 +0000
  Re: multi domains, single IP Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-03-15 20:32 +0100
    Re: multi domains, single IP buck <buck@private.mil> - 2012-03-15 20:54 +0000
      Re: multi domains, single IP Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-03-15 23:05 +0100
        Re: multi domains, single IP buck <buck@private.mil> - 2012-03-16 18:29 +0000
          Re: multi domains, single IP Chris Davies <chris-usenet@roaima.co.uk> - 2012-03-16 21:09 +0000
            Re: multi domains, single IP unruh <unruh@invalid.ca> - 2012-03-16 23:42 +0000
              Re: multi domains, single IP Chris Davies <chris-usenet@roaima.co.uk> - 2012-03-17 09:30 +0000
            Re: multi domains, single IP buck <buck@private.mil> - 2012-03-17 17:47 +0000
              Re: multi domains, single IP Chris Davies <chris-usenet@roaima.co.uk> - 2012-03-18 09:14 +0000
  Re: multi domains, single IP Chris Davies <chris-usenet@roaima.co.uk> - 2012-03-15 22:16 +0000
    Re: multi domains, single IP Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-03-16 00:35 +0100
      Re: multi domains, single IP Chris Davies <chris-usenet@roaima.co.uk> - 2012-03-16 09:03 +0000
    Re: multi domains, single IP Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2012-03-16 09:11 +0200
      Re: multi domains, single IP buck <buck@private.mil> - 2012-03-16 18:41 +0000

csiph-web