How to Publish Different Services Behind NAT by FQDN?

Hi Marwan Kandeel 

For the HTTP/HTTPS based services, you could configure a WAF rule to proxy and forward over incoming sub-domain traffic to your specified internal server IP/port.

However for FTP - WAF will not work, you would need to configure a regular DNAT rule for this. FTP will work the same way for every hostname (ftp://accounting.xyz.com, ftp://web.xyz.com, ftp://ftp.xyz.com)

Regards,

Thanks for the response. So you mean I should configure it with my DNS host? I’m hosting with GoDaddy. Any idea what needs to be performed or how to be done?

Hi Marwan,

You will need to set those domains up as FloSupport have said to point at your IP. Then on the XG you will want to use the Web Application template from Business Application Policies.

Basically you'll be using Webserver protection and setting up a listener that examines the host request and redirects to the appropriate server you have set.

Unfortunately, default natting cannot do this on any appliance i have heard of.

Below is a short guide and to add to it, always enable "pass host header" so if you have a server that has multiple bindinga your webaerver will respond with the correct one.

Emile

Thanks! It worked for me!

One last question:

I was successful doing it for traffic on port 80 for now. But, if the local server is listening on a specifc port, let’s say I access it like this: 192.168.1.20:9965. How would I publish it based on fqdn through the WAF?

Thanks! It worked for me!

One last question:

I was successful doing it for traffic on port 80 for now. But, if the local server is listening on a specifc port, let’s say I access it like this: 192.168.1.20:9965. How would I publish it based on fqdn through the WAF?