Hi,
Very much would appreciate any guidance on this.
I already have NGINX reverse proxy set up on a single physical server providing access to multiple services through subdomains.
I'm now using pfsense as a wan facing router with more physical servers behind it. So my question is, would it make most sense to move the full reverse proxy to the router and remove it from internal servers; or keep it serving services for each physical server and have an additional reverse proxy at the router level.
As far as I can see it there is need to have reverse proxy at the router level atleast as there will be multiple services using port 443 on the server, between two subdomains vpn.example.com and pfsense.example.com.
It seems there would be benefit to having multiple reverse proxies as it would make it easier to migrate or switch out parts of the network i.e. each physical server would essentially be set up to run of itself. But I cant see anyone speaking of this which suggests I'm wrong.
Feel free to point out if this just sounds entirely nuts.
Very much would appreciate any guidance on this.
I already have NGINX reverse proxy set up on a single physical server providing access to multiple services through subdomains.
I'm now using pfsense as a wan facing router with more physical servers behind it. So my question is, would it make most sense to move the full reverse proxy to the router and remove it from internal servers; or keep it serving services for each physical server and have an additional reverse proxy at the router level.
As far as I can see it there is need to have reverse proxy at the router level atleast as there will be multiple services using port 443 on the server, between two subdomains vpn.example.com and pfsense.example.com.
It seems there would be benefit to having multiple reverse proxies as it would make it easier to migrate or switch out parts of the network i.e. each physical server would essentially be set up to run of itself. But I cant see anyone speaking of this which suggests I'm wrong.
Feel free to point out if this just sounds entirely nuts.