Re: Firewalld as a reverse proxy server.

On Sun, Mar 07, 2021 at 11:19:38AM -0000, Jason Long wrote:

Hello, Is it possible and logical to use the Firewalld as a reverse proxy server? I have below plan: The Internet --> Reverse Proxy --> Apache Web Server Apache can do it, but how about Firewalld?

Firewalld supports port forwarding which means it can forward the request to a different server via DNAT. However it can not load balance to multiple servers like full proxies (e.g. haproxy).

e.g. # firewall-cmd --zone <zone> --add-forward-port=port=8080:proto=tcp:toaddr=<addr>:toport=80

This is useful if the webserver is behind a gateway (usually the node running firewalld).