Requesting help with docker networking
reddit / selfhosted

----------------------------------------------------------------------
bored_yet_hopeful · 2023-11-14 16:19

I'm running unraid behind a dedicated pfsense box. Due to local ISPs
shutting down services if some secret bandwidth usage is reached, I've
got multi-WAN set up in pfsense so I can share my load.

I have some docker services (transmission, deemix, etc) I want to
utilize VPN connection, so I have two OpenVPN interfaces set up in
pfsense and docker services which utilize VPN are load balanced over
the two WANs. Docker services not requiring VPN (jellyfin,
audiobookshelf, npm, unraid host, etc) are load balanced over the two
WANs without using the two VPN interfaces.

The simplest way for me, being new, to set up the above, was to put
all my dockers on a macvlan network and assign each docker a unique IP
address in the pfsense dhcp server and then route ranges of IPs to the
interfaces I wanted them to use. Local LAN communication still works.
The check box in settings allowing communication between host and
macvlan dockers works. Everything works.

However, now I'm trying to set up a reverse proxy docker for jellyfin
et al to serve to the internet and I think the root of my failure is
the macvlan network driver.

So my question is: what is the most practical way to maintain my VPN
and non VPN load balancing efforts while still being able to set up my
reverse proxy? Do I even need a reverse proxy, or can I just forward
ports 80 and 443 straight to jellyfin's macvlan IP for example?

I've spent a lot of hours floundering here and am just looking for
advice and wwyd, and any links to guides or how-to's would be
extremely helpful. Thank you.

Lastly, I may be slow to reply as reddit's API debacle killed the app
I was using (rif). I just logged in now to post this. I will monitor
the post intermittently from my browser. Thank you.

----------------------------------------------------------------------
thekrautboy · 2023-11-14 17:29

Try /r/HomeNetworking but also maybe /r/unRAID and /r/Docker i guess.