Hi Marcus,
static NAT (outound connections) works fine - when internal VM access
internet, it's source address is replaced with the MAIN public IP of the
VPC VR (call it IP1 in my example - x.x.x.x) - so all fine.

Then I have additional public IPs to be able to do port forwarding... -
when I do port forwarding on IP2 x.x.x.y (additional public IP on VR) to
the internal IP on VM - the VR actually does some kind of proxying so to
speak - so the source IP in the TCP/UDP packet that reach internal VM IP,
appears to be the  IP1 x.x.x.x (main public IP of the VR)​ instead the real
remote IP of the client...

Will check the scripts - but this is serious issue in my opinion. I
understand proxying (haproxy) works like every proxy - so the behaviour for
the proxy is expected. But this behaviour for the port forwarding is NOT
normal at all...

THanks

Reply via email to