Hosting 2 port 443 websites

Over Clocker · 9 May 2010 at 18:05

Hi guys,

We need to host 2 web applications, both on port 443. They are on separate servers. Outlook Web Access for Exchange 2007, and the website desktop for RDS.

Am I correct in thinking that we will need 2 external IPs for this? We currently just have 1. Also, we currently have a Sonicwall TZ 180 firewall, so we need to upgrade this to one that supports multiple WAN IPs for us to do the separate mappings?

Many thanks,

Mal

paradigm · 9 May 2010 at 18:19

Host header values.

Over Clocker · 9 May 2010 at 18:26

paradigm said:
Host header values.

I thought that you could only use them for http, and not https?

Cheers,

Mal

Subliminal Aura · 9 May 2010 at 18:31

Quick search on google for 'secure certificate vhost'

http://blog.revolunet.com/index.php...ts-on-a-single-ipportcertificate-with-apache2

edit: I'm guessing it's going to be tricky with IIS though

POB · 9 May 2010 at 18:55

Over Clocker said:
I thought that you could only use them for http, and not https?

With IIS from memory its not an option in the GUI but can be made to work with an Admin Script.

Over Clocker · 9 May 2010 at 19:17

I think we'll probably get a 2nd external IP from our ISP, can anyone recommend a good firewall that is capable of working with and forwarding from 2 WAN IPs?

Our current sonicwall one has been 100% reliable, but can only deal with 1x WAN IP.

Cheers,

Mal

/edit - Or do I just use 1x WAN IP, but then make another NAT policy rule to forward from a different public IP?

bigredshark · 9 May 2010 at 19:26

Are you quite sure it can't deal with multiple IPs - if it can't I'm truly shocked because that's something every other firewall made since 1995 has been able to do...

Over Clocker · 9 May 2010 at 20:14

I think I was just overlooking the way it would be configured.

I assume you asign it in the access rules, so instead of source as * pointing to the internal IP, the source would be the public ip?

Cheers