# Noob questions re: multiple web servers **URL:** \ **Category:** Help\ **Created:** [December 26, 2017, 9:18pm UTC](https://community.letsencrypt.org/t/noob-questions-re-multiple-web-servers/49039 "2017-12-26T21:18:09Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![tonyzoc](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/tonyzoc/32/18909_2.png) [@tonyzoc](https://community.letsencrypt.org/u/tonyzoc)\ **Post date:** [December 26, 2017, 9:18pm UTC](https://community.letsencrypt.org/t/noob-questions-re-multiple-web-servers/49039/1 "2017-12-26T21:18:09Z")
Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. [https://crt.sh/?q=example.com](https://crt.sh/?q=example.com)), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help. My domain is: [zdatareports.com](http://zdatareports.com) I ran this command: not configured yet It produced this output: My web server is (include version): Apache2 & IIS The operating system my web server runs on is (include version): Unbuntu 16.04 / Windows 10 My hosting provider, if applicable, is: I can login to a root shell on my machine (yes or no, or I don’t know): yes I’m using a control panel to manage my site (no, or provide the name and version of the control panel): no Q: I know how to put LetsEncrypt on my Ubuntu box for my domain… but I’m wondering if it’s possible to have an IIS web server running on a WIndows 10 box also work. 1. If I have https…port 443 routes through my firewall to Ubuntu IP. If I had port 80 routing to my WIndows IIS, could I still call http:// to get to the IIS websites? 2. Is it possible to have both web servers (IIS and Apache on different servers) using SSL with one domain name? If so, how would this work? If I need two domain names how would that work? I’m using No-IP for dynamic dns. Thanks ---
**Author:** ![jmorahan](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/jmorahan/32/1873_2.png) [@jmorahan](https://community.letsencrypt.org/u/jmorahan)\ **Post date:** [December 26, 2017, 9:41pm UTC](https://community.letsencrypt.org/t/noob-questions-re-multiple-web-servers/49039/2 "2017-12-26T21:41:28Z")
> [@tonyzoc](#): > > If I have https…port 443 routes through my firewall to Ubuntu IP. If I had port 80 routing to my WIndows IIS, could I still call http:// to get to the IIS websites? Yes, provided your Ubuntu website doesn't use HSTS. > [@tonyzoc](#): > > Is it possible to have both web servers (IIS and Apache on different servers) using SSL with one domain name? If so, how would this work? If I need two domain names how would that work? I’m using No-IP for dynamic dns. With one domain name, you can only have one server on port 443. However: - You could have the two servers listen on different external ports. For example Apache on [https://example.com](https://example.com) and IIS on [https://example.com:8443](https://example.com:8443). - You could just use one server to listen externally, and configure it to proxy certain paths to the other. For example Apache on [https://example.com/](https://example.com/) could proxy [https://example.com/iis](https://example.com/iis) to IIS. With two domain names you have a couple more options: - You could configure one server to proxy a particular virtual host to the other. For example Apache handles [https://example.com](https://example.com) and proxies [https://example.org](https://example.org) to IIS. - You could use a SNI-aware proxy such as haproxy to route traffic to a particular backend depending on the domain name. ---
**Author:** ![tonyzoc](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/tonyzoc/32/18909_2.png) [@tonyzoc](https://community.letsencrypt.org/u/tonyzoc)\ **Post date:** [December 27, 2017, 7:54pm UTC](https://community.letsencrypt.org/t/noob-questions-re-multiple-web-servers/49039/3 "2017-12-27T19:54:08Z")
Thanks allot. So If I install a cert on the apache2 using 443, and another cert on the Windows IIS using 8443, created against my domain name…I can route them with a host header redirect in NO-IP…so say [www.mydoamain.com](http://www.mydoamain.com) goes to 443 and [web2.mydomain.com](http://web2.mydomain.com) goes to 8443. NO-IP dns record used to point to my external IP --\> port 443 or port 8443. My router takes the header and redirects to internal IP 10.10.10.101:443 or 10.10.10.102:8443 for example… NO-IP DNS [www.mydomain.com](http://www.mydomain.com) external IP : 443 [web2.mydomain.com](http://web2.mydomain.com) external IP : 8443 Router Port 443 open to 10.10.10.101 Apache2 web server Port 8443 open to 10.10.10.102 IIS web server something like that… ---
**Author:** ![jmorahan](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/jmorahan/32/1873_2.png) [@jmorahan](https://community.letsencrypt.org/u/jmorahan)\ **Post date:** [December 27, 2017, 8:35pm UTC](https://community.letsencrypt.org/t/noob-questions-re-multiple-web-servers/49039/4 "2017-12-27T20:35:51Z")
> [@tonyzoc](#): > > So If I install a cert on the apache2 using 443, and another cert on the Windows IIS using 8443 Just one thing to be aware of with that approach is that you can't _obtain_ a certificate using port 8443 - you need to use 80 or 443 (or use the DNS challenge). However you can obtain the cert using whichever server is listening on 443 and transfer if to the other one, where you can then _use_ it on any port you like. > [@tonyzoc](#): > > I can route them with a host header redirect in NO-IP I'm not sure what that means - is it a feature that NO-IP provides? If it's something that uses a HTTP redirect to send browsers to your IP address, that won't work - Let's Encrypt doesn't issue certificates for IP addresses. Users must access your site directly via its domain name. If Apache is listening on port 443, then it will respond when browsers try to connect to either `https://www.mydomain.com` or `https://web2.mydomain.com` (provided they both point to your external IP address). You can configure it to respond to the latter either by redirecting the browser to port 8443, or by directly proxying the traffic to IIS. There are advantages and disadvantages to both approaches. If your internal network is sufficiently secure, you might find the proxy approach easier, as only one server needs a certificate in that case. ---
**Author:** ![tonyzoc](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/tonyzoc/32/18909_2.png) [@tonyzoc](https://community.letsencrypt.org/u/tonyzoc)\ **Post date:** [December 27, 2017, 9:37pm UTC](https://community.letsencrypt.org/t/noob-questions-re-multiple-web-servers/49039/5 "2017-12-27T21:37:30Z")
I got that mixed up… NO-IP is a dynamic DNS so it’s were I can point domain to external IP. In my router is were I can re-direct based on port to internal IP. I was using the router to take port 80 and point it to IIS box or port 8080 and point to Apache. I think I will need to have Apache do the redirect based on the host header since traffic will come in as 443…I won’t have 2 different ports coming in. I’m going to start with setting up Apache2 with SSL. I actually don’t have any sites I need in IIS currently…but I do some .NET development and wanted a platform for that to play with. ---
**Author:** ![jmorahan](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/jmorahan/32/1873_2.png) [@jmorahan](https://community.letsencrypt.org/u/jmorahan)\ **Post date:** [December 27, 2017, 9:39pm UTC](https://community.letsencrypt.org/t/noob-questions-re-multiple-web-servers/49039/6 "2017-12-27T21:39:31Z")
That sounds like it should work. Good luck! ---
**Author:** ![tonyzoc](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/tonyzoc/32/18909_2.png) [@tonyzoc](https://community.letsencrypt.org/u/tonyzoc)\ **Post date:** [January 5, 2018, 4:12pm UTC](https://community.letsencrypt.org/t/noob-questions-re-multiple-web-servers/49039/7 "2018-01-05T16:12:46Z")
I think I have this figured… I’m using NO-IP with allows port 80 and web redirects. So, I can have a domain in no-ip called [portal.mydomain.com](http://portal.mydomain.com) with a redirect as [https://mydoamin.com:4043](https://mydoamin.com:4043). My router will take port 4043 and forward it to my IIS box IP address and port. Also, my [nextcloud.mydoamain.com](http://nextcloud.mydoamain.com) as https goes to port 443 and my router will forward that to the Ubuntu box IP. I haven’t tried this yet, but I think it will work. ---
**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\ **Post date:** [February 4, 2018, 4:13pm UTC](https://community.letsencrypt.org/t/noob-questions-re-multiple-web-servers/49039/8 "2018-02-04T16:13:03Z")
Closed on February 4, 2018, 4:13pm UTC This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.