Tag Info

New answers tagged

0

For HTTP a reverse proxy can handle separating the traffic. It works because modern browsers send a Host header specifying which site they want. That wont work for most other protocols - you can only see the IP address they requested. If you want other protocols to go to separate servers you will need to request a second public IP from your ISP.


0

You might try a policy route pushing any traffic going to the IP of whatsmyip.com to the LAN address of sonicwall B. This would push it over the VPN and sonicwall B would use its routing table to get it out to the internet. You might also want to create a firewall rule on Sonicwall B to permit traffic from LAN A if not already set to permit all.


0

< bot >convert self-answerer question to CW< /bot > I was finally able to get it working thanks to Pothi. Here is my final config nginx.conf: server { listen 80; server_name _; proxy_set_header Authorization ""; #$http_authorization; proxy_pass_header Authorization; auth_basic "Restricted"; ...


0

Is all traffic from the remote office going through the VPN, e.g. is the vpn the default gateway? If not, then you might need to SNAT all the connections from the internet going to port 22 on the remote machine. Else the connections will return through your internet connection at the remote office. Another possibility is to do remote port forwarding via ...


0

To come back to an old question I posted: The answer is... Get a new router! I wasted far too much time on this... It turns out that MANY off the shelf routers, just can't cope. Sonicwall and Juniper are just a few that failed. The problem is, you have to define your WAN and LAN, and IPSEC/VPN interfaces are attached to WAN, then, if there is a bit of ...


1

Your router is not going to like traffic going out, then back in. If the mobile devices get the IP address from DNS, you can probably set your internal DNS server to give the internal address when they are on your network, but leave the public DNS to point to the outside address.


2

We finally found the solution. You can fix the download speed by running on the NAT machine (as root): ethtool -K eth0 sg off This disables scatter-gather mode, which (as far as I understand this) stops offloading some network work on the network card itself. Disabling this option leads to higher CPU usage on the client as the CPU now has to do the work ...


0

Why use a separate NAT router rather than having the app server(s) act as a NAT router? The most obvious reason would be: Because routers are better routers There are many reasons why a router can be a better router than a server, depending on the router, the server, and your needs. This makes it pretty impossible to answer your question ...


1

I also use NAT boxes in a similar setup in production so very interested in your findings. I haven't had similar findings before production, but maybes it's an issue that I haven't paid attention to before. Let's do some science! ============================================================================ Theory: NAT boxes can download and upload faster ...



Top 50 recent answers are included