Click here to Skip to main content
15,741,947 members
Articles / Internet of Things / Raspberry-Pi
Posted 8 Apr 2019


5 bookmarked

A 4 Stack rPI Cluster with WiFi-Ethernet Bridging and nginx Reverse Proxy

Rate me:
Please Sign up or sign in to vote.
4.91/5 (7 votes)
8 Apr 2019CPOL8 min read
Bonus - Group chat with your rPI's using SlackBot

Image 1



What we're building is illustrated by the diagram above.

  1. A 4 rPi stack
  2. A WiFi to Ethernet Bridge
  3. nginx with reverse proxy to each rPi

Physically, it looks like this:

Image 2

The idea is:

  1. Given domain names (or in this article, a public IP:port to your router)...
  2. Route the TCP/IP packets to the top rPi over WiFi...
  3. Which then nginx routes to any of the 4 rPi's over Ethernet...
  4. Via "DNS Masquerade" which is used to implement a WiFi to Ethernet bridge.

DNS Masquerade

We use DNS Masquerade to create a WiFi to Ethernet bridge. The IP addresses of the physically wired rPi's will be through Two blog posts were used to figure out how to do this:

It seems that since 2017, the way dnsmasq is configured has changed a bit. Most of the steps (except creating a static wireless IP, which broke my wireless on the rPI) regarding the initial setup were fine. For the rest of the dnsmasq steps (specifically the config files), I had to follow the steps in the 2018 blog post.


Execute these commands to get everything up to date and install dnsmasq.

sudo apt-get update
sudo apt-get upgrade
sudo apt-get install dnsmasq

Verify that your WiFi is set up. This file should have contents:

sudo nano /etc/wpa_supplicant/wpa_supplicant.conf

If not, run raspi-config, even though your rPi may already be set up to use Wifi, and configure your WiFi (probably again) from the wireless configuration menu option.

Edit: sudo nano /etc/sysctl.conf and uncomment (remove the '#') the line #net.ipv4.ip_forward=1

Run these commands:

sudo iptables -t nat -A POSTROUTING -o wlan0 -j MASQUERADE  
sudo iptables -A FORWARD -i wlan0 -o eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT  
sudo iptables -A FORWARD -i eth0 -o wlan0 -j ACCEPT
sudo sh -c "iptables-save > /etc/iptables.ipv4.nat"

The above commands (those that I can figure out and should be obvious) forward wlan0 to eth0, and eth0 to wlan0. The configuration file is then saved and with the following command, restored when the rPi boots:

Edit sudo nano /etc/rc.local and just above the exit 0, add the line iptables-restore < /etc/iptables.ipv4.nat.

Create /etc/network/interfaces.d/eth0 with the contents:

auto eth0
allow-hotplug eth0
iface eth0 inet static

Create /etc/dnsmasq.d/bridge.conf with the contents:


Reboot. Try out these commands:


You should see (your wireless IP will most likely be different):

eth0: flags=4163<up,broadcast,running,multicast>  mtu 1500
        inet  netmask  broadcast
wlan0: flags=4163<up,broadcast,running,multicast>  mtu 1500
        inet  netmask  broadcast        

Also execute:

sudo iptables -L

You should see:

Chain INPUT (policy ACCEPT)
target prot opt source destination

Chain FORWARD (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
ACCEPT all -- anywhere anywhere

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

If not, review the steps above and the article links. If all looks good, you can connect a device to the ethernet hub.

Speed Test

Laptop Wifi:

Image 3

Laptop connecting to rPi Wifi-Ethernet bridge:

Image 4

The odd thing about this is when I ran the test the previous evening, the rPi Wifi-Ethernet bridge was faster. Go figure.

For Each rPI

These steps should be performed for each rPi as it makes working to them much easier than hooking up four monitors, keyboards, and mice, or moving cables back and forth all the time.

Enable SSH

Use raspi-config to enable SSH for each rPI:

sudo raspi-config

which brings up a simple UI:

Navigate to item 5 "Interface Options"
Select "P2 SSH - Enable/Disable remote command line access to your Pi using SSH"
Select "Yes" when prompted "Would you like the SSH server to be enabled?"
Select "OK"
Select "Finish" to exit the config app.

Read more about the raspi-config app here.

Install .NET Core 2.2

I'll be doing development with .NET Core and C#, so let's install this next on all four rPI's:

wget <a href="
sudo mkdir -p /bin/dotnet && sudo tar zxf dotnet-sdk-2.2.101-linux-arm.tar.gz -C /bin/dotnet
export DOTNET_ROOT=/bin/dotnet 
export PATH=$PATH:/bin/dotnet
sudo ln -s /bin/dotnet/dotnet /usr/local/bin


  1. Installs dotnet at /bin/dotnet
  2. sets up paths
  3. creates a symlink (shortcut) called "dotnet"

Setup of the Other 3 rPI's

We can now use the wifi-ethernet link to set up the other rPI's without enabling Wifi on them!

Static IP

I'd like my rPI's to have static IPs. The top one is, so it seems logical that the next three should be .2 through .4. This is easily done by editing /etc/dhcpcd.conf and finding the following section, uncommenting the configuration and setting the IPv4 addresses accordingly:

# Example static IP configuration:
interface eth0
static ip_address=
static ip6_address=fd51:42f8:caae:d92e::ff/64
static routers=
static domain_name_servers= fd51:42f8:caae:d92e::1

Reboot, run ifconfig, and verify the static IP address:

eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet netmask broadcast

Installation on the WiFi Bridge rPi

The following pieces I already wrote about in more detail here, so this is just a quick "do this" set of steps. These steps are performed on the whatever rPI (in my case, the top one) is set up as the WiFi-Ethernet bridge.

Install PuTTY

Install PuTTY on, so we can talk with the other rPI's on .1, .2, .3, and .4 (yeah, do this for .1 as well, even though this is under the section Setup the other 3 rPI's.

sudo apt-get install -y putty

Install nginx

I'm going to install nginx on .1 with the intention that it will route the public WiFi address ports to specific rPI's that are responsible for serving the web site -- One website per rPI.

Install nginx:

sudo apt-get install nginx

Auto-start nginx at boot:

cd /etc/init.d
sudo update-rc.d nginx defaults

Reboot and open the Chromium browser on the rPI desktop, or from your laptop connected via Ethernet to the hub, and navigate to

Image 5

Router Port Forwarding and nginx Setup

Next, we want to port forward the Wifi address to each of the Ethernet addresses. I'm going to configure my router like this:

Image 6

3001-3004 are the inbound ports, 8081-8084 are the ports we want nginx to intercept and route to This is really just for testing. In "the real world", I would have set up one or more domain names and the router would route port 80 (HTTP) and port 443 (HTTPS) to the rPi that is the WiFi-Ethernet bridge, using an authorized SSL certificate and SNI to route the domain(s) to the appropriate rPI. nginx can also route specific URL paths to different rPI's, so one could create a setup where different pages are handled by different rPI's, but that's beyond the scope of this "proof of concept" article.

Configuring nginx

Given the router configuration above, each port exposed to the public is routed to a specific rPI. This is the route declaration that gets added to the nginx /etc/nginx/sites-available/default file:

server {
  listen 8081;
  location / {

server {
  listen 8082;
  location / {

server {
  listen 8083;
  location / {

server {
  listen 8084;
  location / {

Reload nginx with:

sudo /etc/init.d/nginx reload

Test using dotnet-serve

Test this by installing dotnet-serve on one of the rPI's (I chose the 4th one):

dotnet tool install --global dotnet-serve

Then run:

export PATH="$PATH:/home/pi/.dotnet/tools"
export DOTNET_ROOT=/bin/dotnet
dotnet-serve -a 10.1.1.[rPI IP address]

The exports are necessary to find dotnet-serve and for dotnet-serve to find dependant libraries.

For example, the 4th rPI in my stack, the final command is:

dotnet-serve -a

For some reason, I get an access denied when I try to specify port 80, which is why nginx was configured above with port 8080.

Find your public IP and type in:

http://[your public ip]:3004

You should get back:

Image 7

and dotnet-serve should be displaying:

Image 8

You can navigate the folders and download the MagPi PDF!

Using Slack to Broadcast Commands

In my article, Slack Chatting with your rPi, I used Slack to communicate to a single rPi. We can use Slack to issue commands to all the rPi's in the stack. This is really useful for doing things like shutting down or rebooting all the rPi's!

Once you've WinSCPs, the slackbot\bin\Debug\netcoreapp2.2\linux-arm\publish folder contents over to each rPi, change the slackBot file to an executable (this only has to be done once) and run it:

chmod +755 ./slackBot

Do this for each rPi. Now, ping the rpi on your Slack channel:

Image 9

All four of them responded!

Let's look at the memory utilization of each rPi:

Image 10

Of course, we'd like to know which rPi is reporting, as they may not necessarily be in order. We can report the IP address whenever the rPi responds by using a bash script executed in the C# slackBot application to get the eth0 address:

static void GetIPAddress()
  ipAddress = "ifconfig eth0 | grep \"inet \"".Bash().Trim().
  Console.WriteLine($"IP: {ipAddress}");

We can then prepend this address to everything sent over the Slack channel by the rPi:

if (router.TryGetValue(cmd, out Func<string, List<string>, string> fnc))
  ret = ipAddress + ": " + fnc(data, options);
  // Try as bash command.
  string cmdline = (cmd + " " + data).Trim();
  ret = $"```\r\n{ipAddress}\r\n{cmdline.Bash()}```";

The results are nice:

Image 11

or, for bash commands, here's an example output with the rPi's IP address:

Image 12

Of course, it would also be nice to talk to a specific rPi. We'll do this by adding the last digit of the rPi's IP address as an option (using the "--" syntax) to talk to just one of them. In the message receive handler, we check for a --[ddd] where [ddd] is the digits in the last part of the IP address:

while (cmd.StartsWith("--"))
  var opt = cmd.LeftOf(" ");

  // Check if a specific address [n] in our IP x.y.z.n is specified.
  // If that's not our address, just exit now.
  if (opt.Length > 2 && char.IsDigit(opt[2]))
    if (opt.Substring(2) != ip4thDigits)

  cmd = message.text.RightOf(opt).Trim().LeftOf(" ");

Note the difference now when we use the --[ddd] option:

Image 13


This is very cool! Everything is doing its thing:

  1. The router is routing
  2. The WiFi-ethernet bridge is bridging
  3. nginx is reverse proxy'ing
  4. the server is serving!

We also modified my Slack Chat application so that we can:

  1. Broadcast commands to all rPi's
  2. Send commands to individual rPi's

While there's a lot more to get done in terms of setting up domain names, SSL certs, and ngnix with SNI, the purpose of this article is how you take the first step in setting up an rPI stack, from which we can now serve pages, provide "compute" capability, play around with distributed data, etc.

Time to take a break.

Image 14

Notes on Installing .NET Core

These notes are for .NET Core 2.0 and I put them here because they are less obtuse (I suppose) than that "wget" command, and may be useful for when .NET Core 3.0 comes of age.


  • Run sudo apt-get install curl libunwind8 gettext. This will use the apt-get package manager to install three prerequiste packages.
  • Run curl -sSL -o dotnet.tar.gz to download the latest .NET Core Runtime for ARM32. This is refereed to as armhf on the Daily Builds page.
  • Run sudo mkdir -p /opt/dotnet && sudo tar zxf dotnet.tar.gz -C /opt/dotnet to create a destination folder and extract the downloaded package into it.
  • Run sudo ln -s /opt/dotnet/dotnet /usr/local/bin` to set up a symbolic link...a shortcut to you Windows folks 😉 to the dotnet executable.
  • Test the installation by typing dotnet --help.


This article, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Written By
Architect Interacx
United States United States
Home Page:

All my life I have been passionate about architecture / software design, as this is the cornerstone to a maintainable and extensible application. As such, I have enjoyed exploring some crazy ideas and discovering that they are not so crazy after all. I also love writing about my ideas and seeing the community response. As a consultant, I've enjoyed working in a wide range of industries such as aerospace, boatyard management, remote sensing, emergency services / data management, and casino operations. I've done a variety of pro-bono work non-profit organizations related to nature conservancy, drug recovery and women's health.

Comments and Discussions

Questionvery minor comment Pin
theoldfool13-May-19 3:01
professionaltheoldfool13-May-19 3:01 
GeneralGood Info and Interesting Pin
stixoffire18-Apr-19 19:18
stixoffire18-Apr-19 19:18 
QuestionWhy the wifi? Pin
Marbry Hardin12-Apr-19 10:18
Marbry Hardin12-Apr-19 10:18 
AnswerRe: Why the wifi? Pin
Marc Clifton16-Apr-19 9:07
mvaMarc Clifton16-Apr-19 9:07 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.