how nginx works i think, by holly:

so you have programs on your server that think they're talking to the internet. like my mastodon tihnks it's talking to the internet directly. but it's not because that would be bad. instead you have nginx sitting between them. the internet talks to nginx and then nginx tells mastodon what it said, and then whatever mastodon says back nginxs says to the internet

@Felthry in general? ¯\_(ツ)_/¯

in my case, in addition to whatever other benefits it has: mastodon wants to be the only thing talking to the internet, but nginx knows how to talk to more than one thing, and it knows how to tell which thing any given request is for

@monorail oh so it's kind of like using an rs232 to rs485 conversion thingy
-F

@Felthry yeah

only one thing can actually talk to the internet at a time, so you have to have nginx in the middle telling everything "oh yeah don't worry, i'm the internet, you're the only one talking to me"

but it says that to both my mastodon instance and to my phpbb board

also nginx knows how to serve files, too, so it itself is one of the things that the internet might be talking to

@monorail @Felthry you could run two web servers but they'd have to be on different ports

@Felthry @noiob 80 is used for http connections, 443 is used for https connections. anything else could be used, but that's what your browser will try by default

@monorail @Felthry also most of the first few hundred ports are reserved for services/programs or have been used by services/programs enough that everyone else just acknowledges that

port 666 is Doom's port, for example, they never formally requested that port but even Windows just labels it doom

there's a benefit to not running stuff on the default port, moving ssh to a different port than 22 means that your login service won't get attacked with dictionaries all the time

@Felthry @noiob so you can't just throw dictionaries at an ssh connection until you find the right password

Follow

@monorail @noiob oh that's just a more aggressive version of "you failed to authenticate three times so you have to wait five minutes before you can try again"
-F

Sign in to participate in the conversation
Awoo Space

Awoo.space is a Mastodon instance where members can rely on a team of moderators to help resolve conflict, and limits federation with other instances using a specific access list to minimize abuse.

While mature content is allowed here, we strongly believe in being able to choose to engage with content on your own terms, so please make sure to put mature and potentially sensitive content behind the CW feature with enough description that people know what it's about.

Before signing up, please read our community guidelines. While it's a very broad swath of topics it covers, please do your best! We believe that as long as you're putting forth genuine effort to limit harm you might cause – even if you haven't read the document – you'll be okay!