diff options
| author | Paul C. Buetow (mars.fritz.box) <paul@buetow.org> | 2014-05-16 20:02:32 +0200 |
|---|---|---|
| committer | Paul C. Buetow (mars.fritz.box) <paul@buetow.org> | 2014-05-16 20:02:32 +0200 |
| commit | cad5da1f4f7e6f65b7b40f32f59718a4f5c45cd5 (patch) | |
| tree | 010ba36ed49acc997ebd81fc19a1a3744e2eb166 /docs/fapi.1 | |
| parent | 3ca51363be15ea13c292a84aec38c3b6847b2b40 (diff) | |
New release
Diffstat (limited to 'docs/fapi.1')
| -rw-r--r-- | docs/fapi.1 | 38 |
1 files changed, 32 insertions, 6 deletions
diff --git a/docs/fapi.1 b/docs/fapi.1 index 1dc317f..78b7cdb 100644 --- a/docs/fapi.1 +++ b/docs/fapi.1 @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "FAPI 1" -.TH FAPI 1 "2014-05-16" "fapi 0.7.0" "User Commands" +.TH FAPI 1 "2014-05-16" "fapi 0.7.1" "User Commands" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -281,15 +281,41 @@ And everything can be deleted as folows: \& fapi node fooserver1.example.com delete \& fapi node fooserver2.example.com delete .Ve -.SS "Setting up simple \s-1NAT\s0 Services" -.IX Subsection "Setting up simple NAT Services" -.Vb 1 -\& (Docu to be written) +.SS "Setting up simple \s-1HTTP\s0 \s-1NAT\s0 Services" +.IX Subsection "Setting up simple HTTP NAT Services" +A simple \s-1HTTP\s0 NATed service can be created as follows. +.PP +.Vb 3 +\& # Create a NATed HTTP vserver +\& # fapi auto resolves the IP address. +\& fapi vserver myvserver.example.com:80 create PROTOCOL_TCP /Common/http +\& +\& # Add the pool to the vserver. +\& fapi vserver myvserver.example.com:80 set pool foopool +\& +\& # Add a NATed HTTPS vserver +\& fapi vserver myvserver.example.com:443 create PROTOCOL_TCP /Common/http +\& fapi vserver myvserver.example.com:443 set pool foopool +\& +\& # Restrict the vserver to a specific VLAN (IMPORTANT! security +\& # hole otherwise!) +\& fapi vserver myvserver.example.com:443 set vlan VLANNAME +\& +\& # Put the VirtualAddress of the vserver into a specific traffic group +\& fapi vip myserver.example.com set tgroup some\-traffic\-group .Ve +.PP +In order to make this work your application servers need to have setup a +default route to the loadbalancers floating self \s-1IP\s0. .SS "Setting up simple \s-1SNAT\s0 Services" .IX Subsection "Setting up simple SNAT Services" +Same as setting up a NATed services, but you don't need to configure default +routes from your application servers to the loadbalancers floating self \s-1IP\s0. +.PP +You need also to set the \s-1SNAT\s0 flag as follows: +.PP .Vb 1 -\& (Docu to be written) +\& fapi vserver myvserver.example.com:443 set snat automap .Ve .SS "About the \s-1NAME\s0 argument" .IX Subsection "About the NAME argument" |