Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have a lot of IP addresses so up to this point we have exposed every external service on its own IP, but it is a pain to manage all of these at the firewall level. What is the best tool to expose to an external IP address and have it reverse proxy these requests to different services? Some of these services include static websites, dynamic web apps, and FTP access.

share|improve this question
Most firewalls do this built-in. It's called PAT/VIP/different things on different vendors hardware. – TheCleaner Jul 11 '12 at 14:27
up vote 3 down vote accepted

I'd suggest some form of load-balancer/reverse-proxy - that's really all anyone does for this.

There's a million to choose from, we use Cisco ACE's and Riverbed Stingrays, others use F5 kit, Brocade all the way down to free stuff like Squid and the like. Either way that's the kind of thing you want.

You can use a firewall for this but I personally prefer to let my FWs just do their job and have my LBs behind them - your mileage may vary.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.