Kids seem to think host name based routing is "new’… It worked fine in the 2000s with Apache.
Comment on What are the benefits of a server having multiple public IP addresses?
Kaavi@lemmy.world 3 weeks ago
You can run two different services on same port, but different ip …
Not really that important anymore, with caddy or nginx it’s easy to get around that for http or https …
atzanteol@sh.itjust.works 3 weeks ago
Croquette@sh.itjust.works 3 weeks ago
It is a lot simpler nowadays. Download Caddy, put a 2 line config and you are good to go.
sugar_in_your_tea@sh.itjust.works 3 weeks ago
Yup, I was reverse proxying early in my career, and I even built my own once for fun (I “hid” an SSH server on my HTTP server by looking at the first few bytes and proxying appropriately).
Matt@lemdro.id 3 weeks ago
Yes, I have always used a reverse proxy which seems to eliminate the need for multiple IP addresses. It seems like having multiple IP addresses just creates additional cost and complexity, but I have seen many VPS providers offer multiple IP addresses, so I was curious if there was a use case that I was not aware of.
cecilkorik@lemmy.ca 3 weeks ago
It’s mostly a relic from an older time, it can be useful for more traditional services and situations that struggle with sharing public IPs. In theory, things like multiple IP addresses (and IPv6’s near unlimited addresses) could be used to make things simpler – you don’t need reverse proxies and NAT and port forwarding (all of which were once viewed as excessive complexity if not outright ugly hacks instead of the virtual necessity they are today).
Each service would have its own dedicated public IP, you’d connect them up with IP routing the way the kernel gods intended, and everything would be straightforward, clear, and happy. If such a quantity of IPs were freely available, this would indeed be a simpler life in many ways. And yet it’s such a distant fantasy now that it’s understandable (though a little funny) to hear you describe it as “additional complexity” when, depending on how you look at it, the opposite is true…
From a modern perspective, you’re absolutely right. The tables have really been turned, we have taken the limitation of IP addresses in stride, we have built elaborate systems of tools and layers of abstraction that not only turn these IP-shortage lemons into lemonade, the way we’ve virtualized the connections through featureful and easily-configurable software layers like private IP ranges, IP masquerading, proxies and tunnels can be used to achieve immense flexibility and reliable security. Most software now natively supports handling multiple services on a single IP or even a single port, and in some cases it requires it. This was not always the case.
It’s sort of like the divide between hardware RAID and software RAID. Once upon a time, software RAID was slow, messy, confusing, unreliable, and distinctly inferior to “true” hardware RAID, which was plug-and-play with powerful configuration options. Nobody would willingly use software RAID if they had any other choice, the best RAID cards were sold for thousands of dollars and motherboards advertised how much hardware RAID they had built-in. But over time, as CPUs and software became faster and more powerful, the tide changed, and people started to realize that actually, hardware RAID was the one that left you tied to an expensive proprietary controller that could fail or become obsolete and leave your array a difficult to migrate or recover mess, whereas software RAID was reliable, predictable, upgradable, supporting a wide variety of disk types and layouts while still performing solidly and was generally far nicer to work with. It became the more common configuration, and found its way into almost every OS. You can now set up software RAID simply by clicking an option in a menu, even in Windows, and it basically works flawlessly without any additional thought.
Times change, we adapt to the technologies that are most common and that work the best in the situations we’re using them in, and we make them better until they’re not just a last resort anymore, but become a first choice, while the old way becomes a confusing anachronism. That’s what multiple public IPs have become nowadays, for most purposes.
atzanteol@sh.itjust.works 3 weeks ago
By “modern” do you mean “the late 90s”? HTTP 1.1 was adopted in '97 and allowed for the host header. NAT and port forwarding have been around since '94 - 2000ish.
Many services worked on any ports at the time as well. SMTP and DNS are probably the only ones that were (and remain) difficult to run on non-standard ports.
Forester@pawb.social 3 weeks ago
The main thing is log separation
It’s a lot easier to figure out why your service is broken if it’s the only service on the IP versus there being 10 services on the same IP all dumping into the same log. Lets me grep a lot easier
pgo_lemmy@feddit.it 3 weeks ago
If your vps is a firewall, you could use it as an exit point for different private networks: ip1 to mask the traffic for a guest subnet that you don’t trust and if the ip gets blacklisted there are no issues for lan traffic behind ip2 while ip3 is reserved for server traffic with specific rulesets on supplier’s systems for updates/backup/whatnot. Should you have more than one mail server because of reasons, if one is blacklisted the other could remain clean (in this situation you usually put them on different subnets but whatever).
catloaf@lemm.ee 3 weeks ago
For http(s), yes. Other services that don’t support host routing, which is most of them, no.
kn33@lemmy.world 3 weeks ago
Most things people self host are either torrent clients, HTTP(s) or are game servers. The first one can pick a port arbitrarily. The second can do host routing. The third - some of them support SRV records so you can direct the client to an arbitrary port. It’s becoming less common to need multiple public IPv4 addresses.
sugar_in_your_tea@sh.itjust.works 3 weeks ago
Depending on the service, you totally can, provided they include some way to recognize them. For example, the first few bytes of SSH are unique, so I made a simple TCP server that would forward traffic to an HTTP(S) server or SSH server depending on those bytes.