Split containers to separate IPs - any security dis/advantages?

[hAtul]

I thought it's time to update my TrueNAS CORE to SCALE.
I used to have a jail for each app (I installed Plex, Transmission & Komga), each app had its own IP.
Transmission got its port opened as a "Virtual Server" in my TP-Link router - pointing on that specific IP address for that jail.

I installed these 3 apps on the new TrueNAS SCALE (while Plex is the only official installation, the rest are form TrueCharts).
They all "sit" on the same IP as the main TrueNAS server, and I'm not sure I'm happy with that:
- I have to open the torrents port for the whole truenas server instead of only a specific ip within the server.
- I got used to have more than one servers, and it was comfortable to see each app listed in my router dashboard (now they are all listed under the main truenas ip.

I have some questions and I'm not sure where to ask, and if this is the place:
- Considering my current situation, is that a downgrade in terms of security?
I am not a security expert or never tried to be, but on the other hand (referring my statement that it might be less secure), if someone hacks my old transmission jail for instance, he/she can probably hack the truenas server too? am I wrong? right? Can someone help me understand this aspect?
- Let's say I don't want the way it's set right now - Is it possible to set a different IPs for each app as it used to be in TrueNAS CORE?

 

[danb35]

- I have to open the torrents port for the whole truenas server instead of only a specific ip within the server.

Why is this a concern? There can only be one thing listening on that port, and that's the container in question.

- Let's say I don't want the way it's set right now - Is it possible to set a different IPs for each app as it used to be in TrueNAS CORE?

I believe this is possible using MetalLB from TrueCharts. I'm not aware of any guides on using that, though.

 

[hAtul]

Why is this a concern?

in general, im a paranoid. so I'm being extra sure this is safe.

 

[sfatula]

It is indeed possible to have different apps using different ips and no need for Truecharts. I do that for several apps for specific purposes, such as Emby being able to do DLNA, using the default port there too. Otherwise, it does not matter if using 1 ip vs 10 ips.