\nsudo su
\n<\/pre><\/code>You will be prompted to enter you password.<\/p>\nAt this point we need to hard code a ip address outside of the home routers dhcp range. So if your home router distributes ip’s from a range between 192.168.1.100 and 192.168.1.200 (you will have to log in and check), you will want to hard code a ip address outside of that range. For my machine I am going to use 192.168.1.20. I am also going to configure my router to forward TCP port 80 to 192.168.1.20, this way all http requests will go directly to the Pound proxy.<\/p>\n
Using the nano text editor lets open the network configuration file and configure a static or hard coded ip for both interfaces.<\/p>\n
\nnano \/etc\/network\/interfaces
\n<\/pre><\/code>Modify the section:<\/p>\n # The primary network interfaceauto eth0iface eth0 inet dhcp <\/pre><\/code><\/pre>\nto look like this:<\/p>\n
# The primary network interfaceauto eth0iface eth0 inet staticaddress 192.168.1.20netmask 255.255.255.0gateway 192.168.1.1broadcast 192.168.1.255dns-nameserver 8.8.8.8 8.8.4.4# Pound Back-end Networkauto eth1iface eth1 inet staticaddress 10.0.0.1netmask 255.255.255.0broadcast 10.0.0.255 <\/pre><\/code>Press <CTRL> + X<\/pre>\nThen “Y” and “enter” to save the file.<\/p>\n
both interfaces are now configured. Now lets activate the second interface that we will connect to the Layer 2 switch and to the Web servers.<\/p>\n
ifup eth1<\/pre><\/code>Lets update the os.<\/pre>\napt-get update && apt-get upgrade -y<\/pre><\/code>Install Pound.<\/pre>\napt-get install pound<\/pre><\/code>Now, if your on a physical machine at this point you are going to need to plug your second nic into a layer 2 switch. If you do not have one laying around just google \"network switch\" and any will do, chances are your home internet upload speed are very slow, so spending more than $10 - $15 here for something over 100mb\/s is going to be a waste. Unless you are not doing this at home or have a nice upload bandwidth, then by all means, chose what fits you best.\u00a0 Also you are going to need as many ports as you have web servers. So if you plan on running 15 Web Servers you will need a 16 port switch (one for each web server and one for the proxy).<\/pre>\nNext lets configure Pound.<\/p>\n
Lets say we have two web servers connected to the switch.<\/p>\n
webserver 1 will host abc.com and its ip address is 10.0.0.2<\/p>\n
Webserver 2 will host 123.com and its ip address is 10.0.0.3<\/p>\n
We now want to configure pound so that it listens on eth0, 192.168.1.20 port 80 for incoming http requests.<\/p>\n
Once it receives these requests we want pound to look at the url and filter it so that all requests for abc.com are sent to 10.0.0.2<\/p>\n
and all requests for 123.com are sent to 10.0.0.3<\/p>\n
To do this we edit the following file like so:<\/p>\n
<\/pre>nano \/etc\/pound\/pound.cfg<\/pre><\/code>edit below the section that starts with:<\/pre>\n\"## listen, redirect and ... to:\"\u00a0 to look like this:<\/p>\n
<\/pre>ListenHTTP Address 192.168.1.20 Port\u00a0\u00a0\u00a0 80 ## allow PUT and DELETE also (by default only GET, POST and HEAD)?: xHTTP1 Service HeadRequire \"Host: .*abc.com.*\" BackEnd\u00a0 Address 10.0.0.2 Port\u00a0\u00a0\u00a0 80 End End Service HeadRequire \"Host: .*123.com.*\" BackEnd Address 10.0.0.3 Port 80 End EndEnd <\/pre><\/code><\/pre>\nYou would repeat this pattern for every server. The only difference is that the final line has one more \"End\" at the end.<\/p>\n
So if you had 100 web server there would be a url pattern and ip address for each host.<\/p>\n
thats it!<\/p>\n
Now restart the pound service for the configuration to take effect.<\/p>\n
<\/pre>service pound restart<\/pre><\/code>You should now navigate to the url abc.com and the request will be served by the webserver at 10.0.0.2 and you will see the content on that web server.<\/pre>\nLikewise, if you navigate to 123.com the request will be server by the host at 10.0.0.3<\/p>\n
*Note<\/p>\n
Configure your domain names that you own, to point to you public ip address. This usually involves logging into your account with whomever you bought the domain names from and just configure the dns A file to point to you public ip address.<\/p>\n
Next I will go over this same setup in a Citrix Xenserver environment with virtual networking.<\/p>\n
Also, I will go over standing up a new apache2 web server and lamp stack.<\/p>\n","protected":false},"excerpt":{"rendered":"
There are scenarios where you only have one public ip address but want to host many domains, each on their own dedicated virtual or physical server.\u00a0 For instance you may want to host several different WordPress sites from your home using several old computers from circa 1998 you found in a closet sitting ontop of… Read More<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"advanced_seo_description":"","jetpack_seo_html_title":"","jetpack_seo_noindex":false,"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[11,15],"tags":[17,19,20,21,24,25,27,29,31,32,36,37,38,41,43,44,51,52,53,54],"class_list":["post-251","post","type-post","status-publish","format-standard","hentry","category-ubuntu","category-walkthroughs","tag-apache2","tag-behind","tag-citrix","tag-configure","tag-ip","tag-lamp","tag-many","tag-multiple","tag-one","tag-only","tag-pound","tag-proxy","tag-public","tag-reverse","tag-servers","tag-stack","tag-walkthrough","tag-web","tag-with","tag-xenserver"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack-related-posts":[{"id":611,"url":"https:\/\/carminebufano.com\/index.php\/2023\/06\/26\/the-dynamic-infrastructure-dilemma\/","url_meta":{"origin":251,"position":0},"title":"The Dynamic Infrastructure Dilemma","author":"Carmine Bufano","date":"June 26, 2023","format":false,"excerpt":"I have about 10 servers, several routers, and 5 enterprise and open switches. I want to rewire all of these things in different configurations frequently. I also want to change the hypervisors that run on the 10 servers. i want to do this the easiest way possible. Remotely. If I'm\u2026","rel":"","context":"In "Walkthroughs"","block_context":{"text":"Walkthroughs","link":"https:\/\/carminebufano.com\/index.php\/category\/walkthroughs\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":374,"url":"https:\/\/carminebufano.com\/index.php\/2020\/11\/12\/cloudron\/","url_meta":{"origin":251,"position":1},"title":"CLOUDRON","author":"Carmine Bufano","date":"November 12, 2020","format":false,"excerpt":"CLOUDRON is a platform that makes it easy to run and maintain web apps on your server. Save $30 with this Referral Code: 61ea681e4f5547a5 https:\/\/www.cloudron.io\/ cloudron.io This software automates your domains dns when creating sub domains. It automatically takes care of TLS and SSL certificates through Let\u2019s encrypt\u2019s https:\/\/letsencrypt.org API.\u2026","rel":"","context":"In "Walkthroughs"","block_context":{"text":"Walkthroughs","link":"https:\/\/carminebufano.com\/index.php\/category\/walkthroughs\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":592,"url":"https:\/\/carminebufano.com\/index.php\/2022\/12\/17\/how-to-manually-remove-vmware-nsx-t-components-from-an-esxi-host\/","url_meta":{"origin":251,"position":2},"title":"How to Manually Remove VMware NSX-T Components from an ESXi Host","author":"Carmine Bufano","date":"December 17, 2022","format":false,"excerpt":"A lab is very dynamic by nature. In stark contrast, data center infrastructure is engineered to be as static as possible once it is configured. So naturally when you have a data center lab you it's only a matter of time before you come across weird anomalies just from the\u2026","rel":"","context":"In "Walkthroughs"","block_context":{"text":"Walkthroughs","link":"https:\/\/carminebufano.com\/index.php\/category\/walkthroughs\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":829,"url":"https:\/\/carminebufano.com\/index.php\/2025\/12\/26\/how-to-get-real-public-ip-addresses-at-home-lab-wireguard-ip-transit-complete-guide\/","url_meta":{"origin":251,"position":3},"title":"How to Get Real Public IP Addresses at your Home Lab: WireGuard IP Transit Complete Guide","author":"Carmine Bufano","date":"December 26, 2025","format":false,"excerpt":"A Complete Guide to why Core Transit's WireGuard IP Transit Service is so incredibly awesome for you lab Bypassing CG-NAT with style - a detailed technical walkthrough The Problem: CG-NAT Hell If you're reading this, you probably know the pain. Your ISP puts you behind Carrier-Grade NAT (CG-NAT), which means:\u2026","rel":"","context":"In "Walkthroughs"","block_context":{"text":"Walkthroughs","link":"https:\/\/carminebufano.com\/index.php\/category\/walkthroughs\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":733,"url":"https:\/\/carminebufano.com\/index.php\/2024\/12\/30\/automating-vmware-network-changes-how-i-turned-hours-of-clicking-into-a-5-minute-powercli-script\/","url_meta":{"origin":251,"position":4},"title":"Automating VMware Network Changes: How I Turned Hours of Clicking into a 5-Minute PowerCLI Script","author":"Carmine Bufano","date":"December 30, 2024","format":false,"excerpt":"Have you ever stared down the barrel of endless repetitive clicks in VMware vSphere, knowing you're in for hours of mindless work? Recently, I faced a scenario where I needed to update hundreds of virtual NICs across just as many virtual machines. Manual changes would have been soul-crushing, so I\u2026","rel":"","context":"In "Programming"","block_context":{"text":"Programming","link":"https:\/\/carminebufano.com\/index.php\/category\/programming\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/carminebufano.com\/wp-content\/uploads\/2024\/12\/3DvSphere-1.jpg?fit=1024%2C1024&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/carminebufano.com\/wp-content\/uploads\/2024\/12\/3DvSphere-1.jpg?fit=1024%2C1024&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/carminebufano.com\/wp-content\/uploads\/2024\/12\/3DvSphere-1.jpg?fit=1024%2C1024&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/carminebufano.com\/wp-content\/uploads\/2024\/12\/3DvSphere-1.jpg?fit=1024%2C1024&ssl=1&resize=700%2C400 2x"},"classes":[]},{"id":857,"url":"https:\/\/carminebufano.com\/index.php\/2026\/04\/20\/ovn-integration-coexistence-on-xenserver-and-xcp-ng\/","url_meta":{"origin":251,"position":5},"title":"OVN Integration & Coexistence on Xenserver and XCP-ng","author":"Carmine Bufano","date":"April 20, 2026","format":false,"excerpt":"Research on multi hypervisor network virtualization using Open Virtual Network Summary The cleanest technical path is not to bolt a foreign br-int onto a host that already has its networking lifecycle owned by XAPI. The safer pattern is to let XAPI create and own a dedicated internal network bridge, then\u2026","rel":"","context":"In "CentOS"","block_context":{"text":"CentOS","link":"https:\/\/carminebufano.com\/index.php\/category\/centos\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"jetpack_shortlink":"https:\/\/wp.me\/p70MUT-43","jetpack_sharing_enabled":true,"jetpack_likes_enabled":true,"_links":{"self":[{"href":"https:\/\/carminebufano.com\/index.php\/wp-json\/wp\/v2\/posts\/251","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/carminebufano.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/carminebufano.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/carminebufano.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/carminebufano.com\/index.php\/wp-json\/wp\/v2\/comments?post=251"}],"version-history":[{"count":2,"href":"https:\/\/carminebufano.com\/index.php\/wp-json\/wp\/v2\/posts\/251\/revisions"}],"predecessor-version":[{"id":459,"href":"https:\/\/carminebufano.com\/index.php\/wp-json\/wp\/v2\/posts\/251\/revisions\/459"}],"wp:attachment":[{"href":"https:\/\/carminebufano.com\/index.php\/wp-json\/wp\/v2\/media?parent=251"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/carminebufano.com\/index.php\/wp-json\/wp\/v2\/categories?post=251"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/carminebufano.com\/index.php\/wp-json\/wp\/v2\/tags?post=251"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
![\"\"](\"https:\/\/i0.wp.com\/carminebufano.com\/wp-content\/uploads\/2014\/08\/Pound-Proxy.vsdx_.jpg?ssl=1\")
<\/a><\/p>\n