MikroTik as Transparent Web Proxy Server for Multiple Web Servers

RouterOS General
1

I have Mikrotik RB1100AHx2 (6.38.5) and also have a domain (have single public IP address), and 2 internal web servers hidden behind public IP address I want to assign to each sub-domain server of its own
I See https://wiki.mikrotik.com/wiki/Multiple_Web_Servers Transparent Web Proxy Server for Multiple Web Servers.
and https://sabrnet.wzk.cz/2017/01/use-mikrotik-as-transparent-web-proxy-server/
and noting i do is not working

How do I actually create a different address for each server?
Subdomain1.domain.com
Subdomain2.domain.com
tnx

2

Hello, read again and it will work, i have the same setup and all is working great.

How do I actually create a different address for each server?
Subdomain1.domain.com
Subdomain2.domain.com

Just add static DNS entries on your Mikrotik.

3

tnx for the reply, i add static DNS entries to the Mikrotik, but it just local.
I dont get subdomain like i need.

4

Now, you need to add some A Records to your DNS zone, like :

5

I already add the DNS record of my 2 server, but its work only if i conncted from home in the same network (lan).
if i try to get the server from wan it give me massage about “dns probe finished nxdomain”
maybe its my isp block that trafic ?
or is it the nat roll is not ok

chain: dstnat
dst. adress :my ip adress
st. port:80
in interface: ether13

action: redirect
to port 8080

6

Now I’ve read your response again and realized that I did not add the A records in domain management
Now I have to wait for the update of the servers but I think it will be fine, thank you very much!

7

OK its WORK
first tnx to evince
and to fix the problem i need to add this line to web proxy server:
“add dst-port=80 action=allow comment=“Enable Http Connection” disabled=no”

8

I hope this is the last question on the subject,
I have a rule in the firewall taht to drop all the traffic that comes to the mikrotik from the router
its lock like this,
drop all

add chain=input comment=“Accept established and related packets” connection-state=established,related
add action=drop chain=input comment=“Drop invalid packets” connection-state=invalid
add action=drop chain=input comment=“Drop all from wan” in-interface=WAN Action=drop.

all work great, but if the 3 rule is on the subdomain is not work, i try to open port 80 in the firewall
any idea ?

9

You need what you wrote in your previous post:

/ip firewall filter
add action=accept chain=input dst-port=80 protocol=tcp

And put it before the last drop rule.

10

You need to add these records to your internet domain DNS server if you want these urls resolved from Internet.

This is usually managed on a control panel at the registrar you bought your domain from.