Multiple web servers - possible on the same port?

InorganicMatter

[H]F Junkie
Joined
Oct 19, 2004
Messages
15,461
I don't know much about this web serving stuff. Here is what I want:

web.png


NO ALTERNATE PORTS!

The Webmail and SVN servers are running Apache. All three are on separate computers. Possible?
 
You'd use internal DNS and routing rules to send inbound port 80 requests to the appropriate web server.
 
Alternatively, some firewalls will have DNS entries you can setup that will route traffic requests for a URL (like mail.company.com or www.company.com) to a specific server name or IP address. I know Sonicwall devices can set this up, as well as many other vendor products.
 
Pound would be my recommendation for this as well. From what I have seen it is pretty easy to configure and it offers quite a bit of flexibility.
 
:confused: maybe I'm missing something but why would he need anything special? He doesn't need DNS to do this (well kind of, but...), he doesn't need a proxy for sure. All he needs is to have port forwarding turned on and configured properly on his router. Also, why in the world would you want your SVN box open to the world? For SVN, I'd setup VPN, and VPN in when ever you wanted to check-in or out code while remote. The only reason you'll need DNS is to separate your webmail address from your IIS server, otherwise POP and/or IMAP can automatically be pointed to your email server with port forwarding. Look into port forwarding, this is actually pretty simple to setup and nearly every router out there has it (in one form or another).
 
he has 2 SSL servers.
He does not want to use a non-default port on either.
He needs something that can distinguish which server to send the request from.

He will need additional software to do this, with his current setup.

Well, I guess it may depend on the router being used. I'm sure some routers have the capability of sending xxx.domain.com to IP 192.168.1.2, and distinguishing yyy.domain.com and sending it to 192.168.1.3
 
he has 2 SSL servers.
He does not want to use a non-default port on either.
He needs something that can distinguish which server to send the request from.

He will need additional software to do this, with his current setup.

Well, I guess it may depend on the router being used. I'm sure some routers have the capability of sending xxx.domain.com to IP 192.168.1.2, and distinguishing yyy.domain.com and sending it to 192.168.1.3
Couple things, it depends on how he's using SVN, if he's actually using SVN then it's on port 3690 so all 443 requests could be directed to webmail. Along that same line, like I said, why in the world would he have his SVN open to the world? Unless he has some type of publicly shared project then there is no reason to have your SVN open to the world, if he is doing a public project he'd be better off using Sourceforge.net since he doesn't understand the most basic parts of web hosting/forwarding. I understand everyone needs to start somewhere (and I applaud those that want to try) but open your code to the world is nuts. ;) Like I said, forward port 80 to www (private IP) and 443 to webmail (Private IP). If he really insists then point 3690 to svn (Private IP).

EDIT: I will say, I've never seen or heard of Pound before, it looks like an interesting/cool project. I've always used hardware devices if I had situations that called for it (like a Big IP). I may download Pound and play around with it, thanks for the link :D
 
Couple things, it depends on how he's using SVN, if he's actually using SVN then it's on port 3690 so all 443 requests could be directed to webmail. Along that same line, like I said, why in the world would he have his SVN open to the world? Unless he has some type of publicly shared project then there is no reason to have your SVN open to the world, if he is doing a public project he'd be better off using Sourceforge.net since he doesn't understand the most basic parts of web hosting/forwarding. I understand everyone needs to start somewhere (and I applaud those that want to try) but open your code to the world is nuts. ;) Like I said, forward port 80 to www (private IP) and 443 to webmail (Private IP). If he really insists then point 3690 to svn (Private IP).

EDIT: I will say, I've never seen or heard of Pound before, it looks like an interesting/cool project. I've always used hardware devices if I had situations that called for it (like a Big IP). I may download Pound and play around with it, thanks for the link :D

ah... good point on the SVN. Somehow I missed that.
 
We run a disconnected office. The SVN server is running VisualSVN over HTTPS, which uses integrated Active Directory authentication. It's secure, see for youself:
https://www.smartldardev.net:8443/svn/
Sorry, don't kid yourself...it's web facing, it's NOT secure ;) First rule of security, if someone wants in bad enough, they will get in. Having code exposed to the world (that's not meant to be) is not something I'm ever willing to do.
 
Do you have a pool of public IP addresses available?
Assign each of those domain addresses a different IP, then just alias the multiple IP's on the router, with each being forwarded to a different internal server.

So DNS-wise for the public IP's you have...

1.2.3.4 = mail.company.com
1.2.3.5 = www.company.com
1.2.3.6 = code.company.com

router interfaces
eth0 = 1.2.3.4 with port 80 forwarding to internal IP 192.168.1.4 of the mail.company.com server
eth0:1 = 1.2.3.5 with port 80 forwarding to internal IP 192.168.1.5 of the www.company.com server

etc... etc...
 
Back
Top