Skip to main content
Eckford on the side
The snippets herein are from far and wide. It makes no sense without context
  • Login
  • Home
  • AI
    • ML Engineering
    • Air-gapped monitoring (ELK lite)
    • vector embedding is a numerical representation of text (that preserves meaning)
    • all-MiniLM-L6-v2 ≈ small (~100MB)
    • Watchdog Agents at API Gateways
    • Deploy to render
    • OpenAI AgentKit
    • SPEC-1-Nutrition-Intelligence-Runtime
    • Proposed Execution Plan (Phase 1)
    • AI - nutrition knowledge and assistance platform
  • Bridges
  • Flask
  • MIDI Sites March 2026
  • 📕 The Spellbook of Merlin
  • The Foundation of Camelot
  • 🗺️ Network Layout Overview and Tests
  • The enterprise AI landscape - AgentOps
  • Agentic AI
  • GitOps
  • Patterns for safely evolving systems without breaking operations
  • Get Smart — Project RULES
  • JTP - alignment attempt (2026-04-21)
  • Primitive Detection engine
Menu
  1. Home

An IP address is like a building’s street address

Wed, 08/20/2025 - 8:24pm by admin

Same public IP/port (443) → Nginx → different internal ports per app. 

  • One IP, many services — An IP address is like a building’s street address. Ports are like apartment numbers. One building (IP) can have hundreds of apartments (ports), each holding a different service.

  • Nginx’s job is to sit at the front door (ports 80 and 443) and figure out which tenant (subdomain) the visitor is asking for.

User -> https://fileman.sh1re.net  ---\
User -> https://transferdepot.sh1re.net -->  Nginx :443  --> routes by Host/SNI -->
User -> https://wiki.sh1re.net     ---/                                  |
                                                                          +--> fileman  -> 127.0.0.1:8083
                                                                          +--> depot    -> 127.0.0.1:8000
                                                                          +--> wiki     -> 127.0.0.1:3000

All three names → same public IP → Nginx routes by name to different upstreams/ports inside.

Gotchas to avoid

  • Two server {} blocks that claim the same name: make sure server_name values don’t overlap unintentionally.

  • Missing SNI/cert coverage: use a cert with SANs for all names or a wildcard *.sh1re.net.

  • A “catch‑all” default_server can steal traffic if a name doesn’t match—verify with:

     curl -I -H "Host: transferdepot.sh1re.net" http://<IP>
nginx
default_server
  • Log in to post comments

Hmmmm

  • cut the cord → go async
  • CSV to JSONL
  • GNOME’s screenshot accelerator
  • 🧰 1. Modern Tools to Know
  • Frodo's USB NIC
  • podman make files
  • Linux 101
  • Access Points on same network
  • catch‑all stole my traffic
  • An IP address is like a building’s street address
Powered by Backdrop CMS