Lots of jobs, one small house
Say you want five jobs running day and night. The first idea is easy: buy five computers. One for each job. But is that a good idea?
Idea A: five computers
- 5 boxes to buy and plug in
- 5 to update and fix
- 5 fans humming, 5 times the power
- Each one sits bored most of the day
Idea B: one computer, many jobs
- Just 1 box to look after
- Each job still gets its own space
- Less noise, less power
- The computer stays busy and useful
New words
Virtualisation (say: vur-choo-uh-lie-ZAY-shun) means one real computer pretends to be lots of smaller computers. The program that does the pretending is called a hypervisor. Idea B uses it.
The magic box: one computer, many rooms
Think of the server as a big building. The hypervisor splits it into rooms. Each job lives in its own room, behind its own locked door. There are two kinds of room:
Container
Like a room in a shared flat. All the rooms share the same pipes and wiring. (For a computer, that is the core of the operating system: the main program that makes the computer work.) But each room has its own lock.
Light and quick: starts in about a secondVirtual machine (VM)
Like a whole separate house, with its own pipes and wiring. It is heavier, but it can run a totally different operating system. Good when a job needs to feel like a real computer.
Heavier, but fully separatePick a room above. Its story will pop up right here.
Why not put every program on one normal computer? If one program crashes, or gobbles all the memory, it can drag the others down too. Separate rooms mean one mess stays one mess.
The doorman: names instead of numbers
Every room has an address made of numbers, plus a door number like :8080. That is like a long phone number. Hard to remember! So a program called Caddy stands at the front door and acts as a doorman.
You say a name, like files.home.lan
The doorman checks its list of names
It walks you to the right room
New word
HTTPS is the little padlock next to a web address. It scrambles your messages so nobody in the middle can read them. The doorman adds the padlock to every room by itself.
Why have a doorman? The network only ever sees one front door. You can move a room or rename it, and nobody outside notices. Only the doorman’s list changes.
Borrowing a brain
The chat helper at home is great at organising: remembering things, using tools, and choosing what to do next. But the really big thinking is done by a giant AI model. It is far too big to fit in a cupboard.
So the home server does not own the big brain. It calls one in a data centre (a huge building full of computers) over the internet. Follow one message on its trip:
The trade-off: renting a brain costs a little every time, and your words leave the house. But you get something a home computer could never run. Some people run a small AI at home instead. It is more private and works without internet, but it is slower and less clever. Many homes use both.
Two ways in from outside
Sometimes you want to reach home when you are out. There are two very different ways in. It is important to keep them apart.
The private tunnel
A tunnel app builds an invisible, scrambled tunnel between your phone and home. Your phone acts like it is sitting on the sofa at home, even from far away. (Grown-ups call this a VPN: a Virtual Private Network.)
Nothing is opened to the whole internet. Only devices you said yes to can even see the door.
The public front door
Some things should be public, like a website. For those, a protection service stands in front of your home. It lets visitors in, blocks bad traffic, and only passes good requests through.
It looks after the padlock (HTTPS) for you, too.
Rule of thumb: private things go through the tunnel. Public things go through the front door. Never open the front door “just in case”.
Why is it built this way?
Each choice fixes a real problem. Tap a question to open the answer. Tap again to close it.
Why one box instead of many?
It costs less, uses less power and makes less noise. You only update one machine. And virtualisation lets it do far more work than you would guess.
Why keep jobs in separate rooms?
So problems stay put. A bad update or a greedy program stays in its own room. You can also take a snapshot (a saved copy) of a room before changing it. If it breaks, you rewind. Just like a save point in a game.
Why a doorman at the front?
You only open one front door, and you use friendly names instead of numbers. The doorman adds the padlock (HTTPS) by itself. It can even ask for a password before letting anyone into a room.
Why borrow a brain instead of buying one?
The biggest AI models need machines that cost more than a car. Renting one costs a few cents per chat, and you always get the newest version.
Why a tunnel for private things?
Anything open to the whole internet gets poked at by strangers all day long. A tunnel means only your own approved devices can get in at all.
Why backups and snapshots?
Disks wear out and people make mistakes. With snapshots, trying something risky is no big deal. Keep it if it works. Rewind in seconds if it does not.
What else could you do instead?
This is not the only way. Here are six other ways to do the same jobs, with the honest good and not-so-good parts.
Quick quiz: did it stick?
Four questions. No pressure. Tap an answer and you will find out why either way.