Page MenuHomeVyOS Platform

TCP reverse-Roxy based on FQDN
Closed, WontfixPublicBUG

Description

We have installed a VyOS instance in our infrastructure and added the main firewall rule to accept all traffic but is not working. (Firewall is disabled)
Trying to implement the reverse proxy as per the online guide: https://docs.vyos.io/en/latest/configuration/loadbalancing/reverse-proxy.html

we are encountering malfunction -> no package received on destination servers.

Below the configuration:

firewall {
    ipv4 {
        input {
            filter {
                default-action accept
            }
        }
        name def_00 {
            default-action accept
        }
    }
}
load-balancing {
    reverse-proxy {
        backend server1_451 {
            mode tcp
            server server1 {
                address 10.1.1.101
                port 451
            }
        }
        backend server2_451 {
            mode tcp
            server server2 {
                address 10.1.1.102
                port 451
            }
        }
        backend server3_451 {
            server server3 {
                address 10.1.1.103
                port 451
            }
        }
        backend server4_451 {
            server server4 {
                address 10.1.1.104
                port 451
            }
        }
        backend server1_456 {
            mode tcp
            server server1 {
                address 10.1.1.101
                port 456
            }
        }
        backend server2_456 {
            server server2 {
                address 10.1.1.102
                port 456
            }
        }
        backend server3_456 {
            server server3 {
                address 10.1.1.103
                port 456
            }
        }
        backend server4_456 {
            server server4 {
                address 10.1.1.104
                port 456
            }
        }
        service LB_port_451 {
            listen-address 10.1.1.1
            mode tcp
            port 451
            rule 1 {
                domain-name server1.service.vvlab.it
                set {
                    backend server1_451
                }
            }
            rule 2 {
                domain-name server2.service.vvlab.it
                set {
                    backend server2_451
                }
            }
            rule 3 {
                domain-name server3.service.vvlab.it
                set {
                    backend server3_451
                }
            }
            rule 4 {
				domain-name server4.service.vvlab.it
                set {
                    backend server4_451
                }
            }
        }
        service LB_port_456 {
            listen-address 10.1.1.1
            mode tcp
            port 456
            rule 1 {
                domain-name server1.service.vvlab.it
                set {
                    backend server1_456
                }
            }
            rule 2 {
                domain-name server2.service.vvlab.it
                set {
                    backend server2_456
                }
            }
            rule 3 {
                domain-name server3.service.vvlab.it
                set {
                    backend server3_456
                }
            }
            rule 4 {
				domain-name server4.service.vvlab.it
                set {
                    backend server4_456
                }
            }
        }
    }
}

Details

Difficulty level
Unknown (require assessment)
Version
1.4
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Bug (incorrect behavior)

Event Timeline

You do not use port 80/443, so it does not have HTTP-HEADER (in theory).

service LB_port_451 {
    listen-address 10.1.1.1
    mode tcp
    port 451

Try to change to port 80 and check if it works.
You need another solution/configuration

Hello,

I need to reverse proxy TCP traffic.
the traffic is not HTTP/HTTPS

Hello,

I need to reverse proxy TCP traffic.
the traffic is not HTTP/HTTPS

It doesn't work this way. You need another solution/configuration.

It's possible to use VyOS as reverse proxy on TCP traffic (not HTTP)?
if yes, what configuration it's necessary?
if not, do you know any solutions that can help me?

Thanks

Viacheslav claimed this task.

Contact our sales or ask forum

Hello,

I need to reverse proxy TCP traffic.
the traffic is not HTTP/HTTPS

Wont this work?

https://docs.vyos.io/en/latest/configuration/highavailability/index.html#virtual-server

Should I ask this to you.

is this configuration working in case of reverseproxy/loadbalancing FQDN based and TCP protocol?