Filter Incoming Web Site connection to Server

My company start to minimize the usage of public IP’s for the company site’s.

They want to start to use one IP for several site, but the website use their own web server services.

In example :
Site A using Server A
Site B using Server B
Site C using Server C

Can I use just 1 public IP in Mikrotik for those site?
AND When a connection arrive into Mikrotik Router OS, the Mikrotik Router OS check the HTTP Header for destination Site,
IF the header destinate to Site A then it will forward to Server A,
IF the header destinate to Site B then it will forward to Server B,
the same for header destinate to Site C

And those Servers only accept connection from Mikrotik BOX,
and in the header of incoming connection from Mikrotik BOX contains the IP of the origin request from Outside Mikrotik BOX.
Something Like X-Forwarded-For Flag in the HTTP Header.
So the web server can collect information from incoming connection.

Can Mikrotik Router OS support that function?

Quite possibly. You could try using the Content option in a dst-nat rule when forwarding TCP port 80 packets.

Regards

Andrew

Andrew, I doubt it could be made the way you probose because you probably break the TCP connection. The HTTP header is transmitted after the TCP connection is established.

What can be done is to separate by domains. I.e., register multiple domains with the same IP address, then setup MT as a proxy only for these registered domains, after that, configure the local DNS cache to resove these domains differently, say one domain per internal IP… that’s all :slight_smile:

You’re right, hadn’t thought of that.

Proxying is a neat solution.

Regards

Andrew

I am interesting in similar solution :slight_smile: can you near specify how to configure MT as proxy for domains :slight_smile:

Thanks for basic how to :slight_smile:

/Tomi