R
R
rionnagel2015-03-17 11:45:33
System administration
rionnagel, 2015-03-17 11:45:33

Redirecting traffic, adjusting routes, how?

Good day. There is such a situation: there is a service (using ssl), which is located on the other side of the world, there are many clients, there is mikrotik ccr in the office next to the clients. Tracert from clients to service - many hops, tracert from office to service - few hops (static routes). In the service we can change the address of the appeal.
We want to make sure that traffic from customers to the service goes through us. How to do this without using vpn, manually setting routes, etc., generally without touching clients, except to change the address in the service?
ps. We tried to wrap it through nginx, but it refuses to pass ssl through itself without valid keys. On Mikrotik, they tried to play with the srcnat and dstnat rules, but it didn’t work (perhaps they didn’t make the rules right?), maybe you need to use mangle and add routes?
Thanks in advance for your replies.
_____________________________________________________________________________
Answer:
We bought our domain name and certificate - everything works through nginx reverse proxy.

Answer the question

In order to leave comments, you need to log in

1 answer(s)
C
Cool Admin, 2015-03-17
@rionnagel

You need to specify a static route on the default gateway for clients, if this is MK, then this can be done on it in a bunch of different ways, from the simplest - to actually create this static route, to the complex - mark the necessary traffic and send it to the routing table cut off through VRF created in route rule.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question