4 ms·

What's the advantage over just typing the IP into the browser bar?

by icholy 7y ago

sleepybrett 7y ago
I know my corporate firewalls do not allow connections to bare ip addresses. This allows me to bypass that check for things I haven't assigned names to already.
- yathna 7y ago
  this makes no sense -- all tcp connections are already to the "bare ip address". dns lookup happens independently of the ip connection. in the case of a browser, your browser asks the local resolver (or with doh, remote nameserver) what the ip is for a given domain, then connects to that ip. I suppose it's possible your network has some strange setup that pokes holes through the firewall based on dns requests, but that would be obscenely expensive both computationally and financially.
  - clwg 7y ago
    The simplest implementation of this would be to block all outbound traffic for all hosts by default, and allow only web traffic out through a proxy. Then for other specific services poke holes for specific src<->dst.
  - icedchai 7y ago
    He probably means his corporate proxy servers, not firewalls.
    - sleepybrett 7y ago
      indeed, sorry.
  - clinta 7y ago
    The firewall or proxy is probably looking at the HTTP host header, and blocking requests with an IP there.
BozeWolf 7y ago
When developing for iphone, react native uses xip (i think?) to have direct access to the development server on the laptop. Apple does not allow connecting to the ip directly. Details: https://github.com/facebook/react-native-website/blob/master/website/versioned_docs/version-0.5/running-on-device.md#3-networkrouter-configuration https://github.com/facebook/react-native-website/blob/master...
vince14 7y ago
I'm using it in order to talk to different backends without touching the nginx config. server_name ~^(?<sub>\w+)\.127\.0\.0\.1\.xip\.io$; root sites/$sub;
yegle 7y ago
You can create SSL certificate with a domain name but not so easy with an IP. See https://blog.filippo.io/how-plex-is-doing-https-for-all-its-users/ https://blog.filippo.io/how-plex-is-doing-https-for-all-its-...
buildzr 7y ago
Seems to be targeted at allow multiple vhosts and SSL certs on the same IP.
dahart 7y ago
I generally didn’t use xip.io in the browser bar, the use cases are more commonly putting the address in web forms for things that return a wildcard address but need to be a well-formed domain name. I’ve used xip.io for AWS security rules, CORS rules, Google API redirects, mobile app testing against a local server, stuff like that...

What's the advantage over just typing the IP into the browser bar?

by icholy 7y ago

What's the advantage over just typing the IP into the browser bar?

I know my corporate firewalls do not allow connections to bare ip addresses. This allows me to bypass that check for things I haven't assigned names to already.

yathna 7y ago
this makes no sense -- all tcp connections are already to the "bare ip address". dns lookup happens independently of the ip connection. in the case of a browser, your browser asks the local resolver (or with doh, remote nameserver) what the ip is for a given domain, then connects to that ip. I suppose it's possible your network has some strange setup that pokes holes through the firewall based on dns requests, but that would be obscenely expensive both computationally and financially.
- clwg 7y ago
  The simplest implementation of this would be to block all outbound traffic for all hosts by default, and allow only web traffic out through a proxy. Then for other specific services poke holes for specific src<->dst.
- icedchai 7y ago
  He probably means his corporate proxy servers, not firewalls.
  - sleepybrett 7y ago
    indeed, sorry.
- clinta 7y ago
  The firewall or proxy is probably looking at the HTTP host header, and blocking requests with an IP there.

BozeWolf 7y ago

When developing for iphone, react native uses xip (i think?) to have direct access to the development server on the laptop. Apple does not allow connecting to the ip directly. Details: https://github.com/facebook/react-native-website/blob/master/website/versioned_docs/version-0.5/running-on-device.md#3-networkrouter-configuration https://github.com/facebook/react-native-website/blob/master...

vince14 7y ago

I'm using it in order to talk to different backends without touching the nginx config. server_name ~^(?<sub>\w+)\.127\.0\.0\.1\.xip\.io$; root sites/$sub;

yegle 7y ago

You can create SSL certificate with a domain name but not so easy with an IP. See https://blog.filippo.io/how-plex-is-doing-https-for-all-its-users/ https://blog.filippo.io/how-plex-is-doing-https-for-all-its-...

buildzr 7y ago

Seems to be targeted at allow multiple vhosts and SSL certs on the same IP.

dahart 7y ago

I generally didn’t use xip.io in the browser bar, the use cases are more commonly putting the address in web forms for things that return a wildcard address but need to be a well-formed domain name. I’ve used xip.io for AWS security rules, CORS rules, Google API redirects, mobile app testing against a local server, stuff like that...