Bobcares

pfSense Acme HAproxy | Setup Guide

by | Aug 12, 2023

Learn how to set up a web server with pfSense, ACME, and HAProxy. Our pfSense Support team is here to help you with your questions and concerns.

pfSense Acme HAproxy | Setup Guide

Managing a web server with pfSense, ACME, and HAProxy can be a game-changer. These tools let us simplify SSL certificate management and optimize traffic distribution.

pfSense Acme HAproxy | Setup GuideToday, we are going to take a look at installing and configuring ACME and HAProxy.

How to install Acme and HAProxy

  1. First, log into the pfSense dashboard and head to the System tab. Then, choose Package Manager.
  2. After that, head to Available Packages where we will find tools and features to help us add to our pfSense setup.
  3. Next, search for “acme” and “haproxy” within the available packages. After locating them, install them both. After installation, we will find them under the Installed Packages tab.

How to set up HAProxy

  1. First, head to Services and select HAProxy.
  2. Then, configure the backend server by navigating to the Backend and click Add.
  3. Now, enter a name for the backend server. Furthermore, add the internal web server’s IP and port under the Server list section.

    In addition, if our server uses HTTPS we have to enable the Encrypt(SSL) option. Although, we should leave SSL Check disabled to prevent errors with self-signed certificates.

  4. Next, we have to scroll to the Health Checking section and choose None.
  5. Finally, click Save to save the changes made.

Front-End Proxy Setup

  1. At this point, we have to head to the HAProxy menu and choose the Front End tab.
  2. Then, click Add and assign it a name to create a front-end proxy.
  3. Next, we have to choose where the incoming requests will originate from under “listen address”.
  4. Additionally, we have to add WAN Address(IPv4) to the “listen address” options if we want to make our web server accessible from the internet. Furthermore, we have to open port 443 on our router for external access.
  5. Now, enter a name and change the expression to Host Matches in the Access Control list section.
    We can enter the domain name we want to associate with our web server in the Value field.

  6. Finally, head to Actions and choose Use backend from the dropdown menu. We have to enter the name of the backend server we configured earlier. Furthermore, choose the backend we set up earlier from the dropdown.

[Need assistance with a different issue? Our team is available 24/7.]

Conclusion

In summary, our Support Techs demonstrated how to set up a web server with pfSense, ACME, and HAProxy.

PREVENT YOUR SERVER FROM CRASHING!

Never again lose customers to poor server speed! Let us help you.

Our server experts will monitor & maintain your server 24/7 so that it remains lightning fast and secure.

GET STARTED

0 Comments

Submit a Comment

Your email address will not be published. Required fields are marked *

Never again lose customers to poor
server speed! Let us help you.

Privacy Preference Center

Necessary

Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

PHPSESSID - Preserves user session state across page requests.

gdpr[consent_types] - Used to store user consents.

gdpr[allowed_cookies] - Used to store user allowed cookies.

PHPSESSID, gdpr[consent_types], gdpr[allowed_cookies]
PHPSESSID
WHMCSpKDlPzh2chML

Statistics

Statistic cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously.

_ga - Preserves user session state across page requests.

_gat - Used by Google Analytics to throttle request rate

_gid - Registers a unique ID that is used to generate statistical data on how you use the website.

smartlookCookie - Used to collect user device and location information of the site visitors to improve the websites User Experience.

_ga, _gat, _gid
_ga, _gat, _gid
smartlookCookie
_clck, _clsk, CLID, ANONCHK, MR, MUID, SM

Marketing

Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third party advertisers.

IDE - Used by Google DoubleClick to register and report the website user's actions after viewing or clicking one of the advertiser's ads with the purpose of measuring the efficacy of an ad and to present targeted ads to the user.

test_cookie - Used to check if the user's browser supports cookies.

1P_JAR - Google cookie. These cookies are used to collect website statistics and track conversion rates.

NID - Registers a unique ID that identifies a returning user's device. The ID is used for serving ads that are most relevant to the user.

DV - Google ad personalisation

_reb2bgeo - The visitor's geographical location

_reb2bloaded - Whether or not the script loaded for the visitor

_reb2bref - The referring URL for the visit

_reb2bsessionID - The visitor's RB2B session ID

_reb2buid - The visitor's RB2B user ID

IDE, test_cookie, 1P_JAR, NID, DV, NID
IDE, test_cookie
1P_JAR, NID, DV
NID
hblid
_reb2bgeo, _reb2bloaded, _reb2bref, _reb2bsessionID, _reb2buid

Security

These are essential site cookies, used by the google reCAPTCHA. These cookies use an unique identifier to verify if a visitor is human or a bot.

SID, APISID, HSID, NID, PREF
SID, APISID, HSID, NID, PREF