Multiple domain forwarding 1 Public IP

Hi Rafal Niznik 

Yes, this can be easily done using WAF in Sophos XG. But make sure you select Pass host header in your WAF Business Application rule.

Please refer to this KBA Sophos XG Firewall: WAF configuration guide and in case if you need there's a Sophos XG Firewall: WAF Troubleshooting guide as well.

Hi,

Can you please give me an example how to configure this business rule (WAF) for the mentioned scenario?

environment:

1 Public IP
2 different domains (each domain A record points to public IP)
2 different web servers (no vhosts)

Goal:

Domain A hits public IP of (XG Firewall) and forwards to server 1
Domain B hits public IP of (XG Firewall) and forwards to server 2

The KBA https://community.sophos.com/kb/en-us/126470 only describes how to publish one webserver. But here we have two (or more) webservers behind one public IP and multiple DNS-Names.

As far as i understand, the option "Pass host header" just passes the host header to the webserver, so it can route to a configured vhost. In the described environment we have to seperate webservers without vhosts. The option "pass host header" has no effect here?

Thank you!

RasalGhul,

follow the KB above. You need to create 2 different WAF rule, where in each one you define the domain name for server 1 and in the second rule, the domain name for server 2.

Regards

Make sure the servers are using different ports.

Ian

Thank you for clarify this. It works with different WAF rules for each server/domain!

I had trouble with my browser cache so things were not running as they should.

No need to use different ports for the servers nor WAF rules. Both servers listen to port 80 internal (LAN) and are reachable on port 443 from external (WAN) through WAF rule. 

No need to use different ports for the servers nor WAF rules. Both servers listen to port 80 internal (LAN) and are reachable on port 443 from external (WAN) through WAF rule.