Multiple Web Servers at Home

Question

I want to build a home network which has multiple webservers inside and plan to use tiny processor boards like raspberry pi, etc. as webservers.

I found that I need to use reverse proxy to reach multiple servers from one public IP's. My plan is, the behind the modem there will be two separate networks: one for everything other than servers, second for servers only. On server network next device is reverse-proxy and last devices servers.

Server network like this: [ modem -> reverseProxy -> Servers). ] -> OtherDevices (PC,Phone etc.)]

My questions are:

1. My reverse proxy device which I plan to use has 2 Network Ethernet Controllers. Do I need to create another sub-network(NAT I guess) for security or other reason? Do I need to use both ethernet ports?

2. My second question if I use both ethernet ports do I need routing between 2 network or nginx reverse proxy will just handle it?

3. My last question if I use routing between two networks does it cause any security issue? Is it worth to use both ethernet controllers? Take spending time and security into account, should I just use one controller or both with bridging or Nat?

Answer 1

Reverse proxy is not the same thing as IP routing – it only forwards the HTTP requests at application layer; the proxy itself acts as the TCP server and as client.

So the only requirement is that the proxy itself must be able to connect to the final webserver, but it doesn't matter whether they're on the same subnet or not. There is no DNAT or anything like that involved, so you can use a single interface – "NAT loopback" won't be an issue.