Access internal website from internet

caymann · 2024-05-27T20:48:48.842Z

I use DDNS service in openwrt and upload and sync my dynamic IP address every few hours
I also use haproxy for openwrt as a reverse proxy and it works great!

In the GLi firewall, i have port forwarded 443 WAN/LAN
In the GLi firewall, I opened up port 9000 for Haproxy
I am unable to access my internal websites therough the WAN port.
I am using Adguard Home in GL.inet

Any pointers?

admon · 2024-05-27T20:50:40.669Z

I am not even sure what you are trying to do, to be honest

You need to open the port on the GL router as well, of course. Not only opening but doing a port forward as well.

caymann · 2024-05-27T22:56:32.224Z

I did a port forward

image1063×366 15.4 KB

Also opened port for haproxy

image1067×377 15 KB

alzhao · 2024-05-28T09:50:50.655Z

caymann:

I am unable to access my internal websites through, cloudflare and open WAN port.

What does Cloudflare do in this setup?

Pls note, the "port forward" only forward to internal IP addresses. You cannot forward to IP on the Internet.

caymann · 2024-05-28T12:02:01.173Z

I am not looking to forward to IP on the internet.

admon · 2024-05-28T12:02:43.575Z

So what is the ultimate goal?

caymann · 2024-05-28T12:03:14.226Z

I want to access my internal websites from the internet

admon · 2024-05-28T12:04:24.446Z

So you port forward to an internal IP 443 and 80?
This isn't working?

caymann · 2024-05-28T12:05:23.097Z

The above screenshot shows, i have port forwarded 443 from WAN to 443 on LAN.

admon · 2024-05-28T12:06:59.806Z

10.66.77.1 is a webserver in your network, directly connected to the router?
I guess we need a network diagram to understand what you are doing and why it doesn't work.

caymann · 2024-05-28T12:07:53.251Z

10.66.77.1 is the x3000 IP address
I will be happy to see the gli x3000 interface

admon · 2024-05-28T12:08:46.604Z

This won't work. You can't port forward to the device itself.
In that case, you need to open a port instead of doing a forward.

caymann · 2024-05-28T12:09:27.315Z

For testing purposes, i will open port 80 so that i can access the x3000 router

admon · 2024-05-28T12:11:37.656Z

Please keep in mind that you can't have open ports on cellular (mostly)

alzhao · 2024-05-28T13:26:10.610Z

Unless you have a static IP.

Otherwise use vpn etc.

caymann · 2024-05-28T14:42:02.910Z

I don't have static IP
That is why i use DDNS service, to update the dynamic IP

alzhao · 2024-05-29T02:08:01.810Z

ddns does not solve the problem if you don't have a fixed IP.