Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

web server using paths

I have 2 web servers.  One on one IP (web server 1) and another server on another IP (web server 2).  Web server 1 has been working great as setup in the security policies.  When adding web server 2 I assume I need to enable path specific routing as these are two completely different sites on different servers.

The paths setup are the default one for server 1.  / and then the web server name

The 2nd path I setup as /iqanywhere which is the folder name that the 2nd website resides in.  I've also added the domain and the static ip in the domain section.

It seems that whatever I pick it doesn't look at the /iqanywhere path and simply defaults to web server 1.  Am I missing a step?



This thread was automatically locked due to age.
  • Hi,

    I'm not completely sure what you're trying to do but I just explain how it works in general. ;-)

    You have

     * web server 1 with internal FQDN / IP address, e.g. internal1.local (HTTP port 80)
     * web server 2 with internal FQDN / IP address, e.g. internal2.local (HTTP port 8080)


     * registered external domain name(s),  e.g. externalA.com

    Basic Setup


    You create a Firewall rule (HTTP based Business Application Rule)

     * domain name: externalA.com
     * hosted address: the IP address where externalA.com resolves to
     * web Servers: web server 1 and web server 2
     * HTTP, port 80


    What happens:
    If you request http://externalA.com/ it forwards the request alternately to web server 1 (to http://internal1.local/) and web server 2 (to http://internal2.local:8080/)
    If you request http://externalA.com/mypath/ it forwards the request alternately to web server 1 (to http://  internal1.local/mypath/) and web server 2 (to http:// internal2.local:8080/mypath/)


    Advanced Setup with path-specific routing

    You enable path specific routing

     * path '/': only web server 1
     * path '/mypath/': only web server 2

    What happens:
    If you request http://externalA.com/ it forwards the request only to web server 1 (to http://internal1.local/)
    If you request http://externalA.com/mypath/ it forwards the request only to web server 2 (to http:// internal2.local:8080/mypath/)

    I hope that makes it more clear.

    Best,
     Sabine

    Edited because the stupid forum software break my example links. Remove the whitespaces in the links where necessary. ;-)

  • Thanks for the response.  Looking at what you wrote it appears that my problem is that I have both sites on port 80 when I need one to be on 8080

    What I am trying to do is have domain1.com visible on the internet from server 1 and also domain2.com on server 2 visible on the internet.

  • Hi,

    no, the port doesn't have to be different. It was just an example.

    If you want to have domain1.com to web server 1 and domain2.com on web server2, then you need two different HTTP-based Business Application policies.

    Best,
     Sabine

  • Really?  Talk about over-complicating it.  I really messed that one up.

    Thank you.  It works now.