How to do it...

  1. First, we will create aliases for ports 80 and 443:
    1. Navigate to Firewall | Aliases.
    2. Click on the Ports tab.
    3. Click on the Add button.
    4. In the Name text field, enter an appropriate name (for example, WEB_SERVER_PORTS):

    1. In the Description edit box, enter a brief, non-parsed description.
    2. Enter 80 in the Port text field and a description in the adjacent text field (for example, HTTP).
    3. Click on the Add Port button.
    4. A new set of boxes should appear. Enter 443 in the Port text field and a brief description (for example, HTTPS).
    5. Click on the Save button.
    6. Click on the Apply Changes button.
  1. Next, we want to create an alias for the web servers:
    1. Navigate to Firewall | Aliases | IP.
    2. From the IP tab, click on the Add button.
    3. In the Name edit box, enter an appropriate name (for example, WEB_SERVER_IPS):

    1. In the Description text field, enter a brief, non-parsed description.
    2. Enter 192.168.2.11 in the IP or FQDN edit box. Enter a brief description in the adjacent text field (for example, WEB SERVER 1).
    3. Click the Add Host button.
    4. Repeat this process for the remaining two web servers.
    5. Click on the Save button.
    6. Click on the Apply Changes button.
  1. Now, we can configure the load balancer:
    1. Navigate to Services | Load Balancer | Pools.
    2. From the Pools tab, click on the Add button.
    3. In the Name text field, enter a name for the pool.

    1. In the Description text field, enter a brief description.
    2. In the Port text field, enter the alias we created in step 1.
    3. In the Retry text field, enter the number of times pfSense will retry a server before declaring it to be down.
    4. In the Add Item to the Pool section, enter the first web server IP (192.168.2.11) in the Server IP Address edit box.
    1. Click on the Add to pool button.
    2. Repeat this process for the second and third web server IPs (192.168.2.12 and 192.168.2.13).
    3. When you are done, click on the Save button.
    4. Click on the Apply Changes button:

  1. Next, we add the virtual servers:
    1. Click on the Virtual Servers tab.
    2. Click on the Add button.
    3. In the Name text field, enter a name:

    1. In the Description text field, enter a non-parsed description.
    1. In the IP Address text field, enter the IP address for the web server to listen on (usually the WAN IP address).
    2. The Port text field should support aliases, but it does not. Thus, enter 80 into this text field.
    3. Click on the Save button when done.
    4. When the page loads, click on the Copy icon for the virtual server just created. This will create an identical virtual server.
    5. Change the Name to differentiate it from the first virtual server.
    6. Change the Port to 443.
    7. Click on the Save button when done.
    8. Click on the Apply Changes button.
    9. Next, we add monitors for both active ports:
      1. Click on the Monitors tab.
      2. Click on the Add button.
      3. In the Name text field, enter a name:

      1. In the Description text field, enter a non-parsed description.
      1. In the Type drop-down menu, select HTTP.
      2. In the Path text field, enter a web page path for a page that will return a 200 OK code (for example, /index.html).
      3. Click on the Save button when done.
      4. Click on the Add button again.
      5. Enter a Name and Description.
      6. In the Type drop-down menu, select HTTPS.
      7. In the Path edit box, enter a web page path for a page that will return a 200 OK code (for example, /index.php).
      8. Click on the Save button when done.
      9. Finally, we must add a firewall rule for the web server pool:
        1. Navigate to Firewall | Rules.
        2. Click on the WAN tab.
        3. Click on the Add button.
        4. For Destination, select Single host or alias:

  1. Enter the web server pool alias we created in step 2.
  2. Set Destination Port Range to the port alias we created in step 1.
  3. In the Description field, enter an appropriate description.
  4. Click on the Save button.
  5. Click on the Apply Changes button:

..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset
3.144.86.134