Multiple hosts behind single address

Server
1

I have a peculiar setup where there are multiple servers, each running nginx on port 90, which connect to a single server, on which another port is then redirected back to that host.

eg
example.com:10001 -> 1.2.3.4:90
example.com:10002 -> 2.3.4.5:90
example.com:10003 -> 4.5.6.7:90

I could see one solution that would be to install nginx on example.com to do the port forwarding (I’m not sure what is doing it at the moment, I don’t have access to that server currently), and to setup https there, but that would only encrypt between the client and example.com (not the redirect back to the real host). I really would like to have end to end encryption.

Is there anyway of having 1 certificate and sharing it between all the hosts (and dealing with renewal nicely…)

2

Since all three sites are stacked on one name/IP, you probably can get and use only one cert.
Where the problem comes in is that you say you don’t have access to the server doing the redirect and the ports used are not 80 nor 443.
Without that control option you may be limited to obtaining certs via DNS challenge.
Are you able to make DNS entries in the “example.com” zone?

3

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.