和SNI RST有点关系

[daiaji]

我在我家搭了网站，但是

curl -vi https://www.sb.xyz:8443/
*   Trying 10.10.10.10:8443...
* Connected to www.sb.xyz (10.10.10.10) port 8443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
*  CAfile: /etc/ssl/certs/ca-certificates.crt
*  CApath: none
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* OpenSSL SSL_connect: 连接被对方重设 in connection to www.sb.xyz:8443 
* Closing connection 0
curl: (35) OpenSSL SSL_connect: 连接被对方重设 in connection to www.sb.xyz:8443

我都用hosts指定IP到内网了，SNI的报文应该就不走公网了吧。
笑死，podman端口映射有毛病