Additional IPv4s

ServerBachelor

Let’s suppose I have two IPv4s associated with the same VPS. If I point domain A’s A record to the first IP, and domain B’s A record to the second IP, would it be possible for a website viewer to see that the two sites are being hosted on the same VPS (such as with reverse IP lookup tools?)

Saragoldfarb

No.

tdworz

Generally speaking, no.

It may be possible to see the IP addresses are used by hosts at the same physical location or that the IP addresses are offered by the same provider. However, to see that both IPs are assigned to the same VPS is not possible.

That being said, it is possible that the software running on the VPS can give this information away, or at least that it might give away clues. But that's a matter of your competence and control.

ServerBachelor

@tdworz said:
Generally speaking, no.

It may be possible to see the IP addresses are used by hosts at the same physical location or that the IP addresses are offered by the same provider. However, to see that both IPs are assigned to the same VPS is not possible.

That being said, it is possible that the software running on the VPS can give this information away, or at least that it might give away clues. But that's a matter of your competence and control.

Got it, thanks!

tentor

@ServerBachelor said: If I point domain A’s A record to the first IP, and domain B’s A record to the second IP, would it be possible for a website viewer to see that the two sites are being hosted on the same VPS

If your visitor is an advanced user, and if SSH is exposed to both IPv4 addresses, they can compare host keys and if they're equal it is safe to assume that both IPv4 addresses are served by the same server.

ServerBachelor

@tentor said:

@ServerBachelor said: If I point domain A’s A record to the first IP, and domain B’s A record to the second IP, would it be possible for a website viewer to see that the two sites are being hosted on the same VPS

If your visitor is an advanced user, and if SSH is exposed to both IPv4 addresses, they can compare host keys and if they're equal it is safe to assume that both IPv4 addresses are served by the same server.

How can I disable SSH for one of the IPs?

tentor

@ServerBachelor said:

@tentor said:

@ServerBachelor said: If I point domain A’s A record to the first IP, and domain B’s A record to the second IP, would it be possible for a website viewer to see that the two sites are being hosted on the same VPS

If your visitor is an advanced user, and if SSH is exposed to both IPv4 addresses, they can compare host keys and if they're equal it is safe to assume that both IPv4 addresses are served by the same server.

How can I disable SSH for one of the IPs?

From man sshd_config:

       ListenAddress
               Specifies the local addresses sshd(8) should listen on.  The following forms may be used:

                     ListenAddress hostname|address
                     ListenAddress hostname:port
                     ListenAddress IPv4_address:port
                     ListenAddress [hostname|address]:port

Specify specific address or restrict access to the 22/tcp using firewall (allow only one destination IP address).

SteveMC

Someone can try to access Domain 1 with the IP 2 and see if he receives an answer.