I am wondering if there is any additional security increase by choosing to run your webserver on an internal private ip address and port like xyz.ab.cd.efg:8080 versus localhost:8080 or 127.0.0.1:8080
If so, what does this mitigate against?
For this scenario lets assume that your webserver is serving some site example.com, and that the policy of the load balancer (which is the only interface for internet traffic routed inside your box), is told to only deliver traffic over HTTPS on 443, where once inside your box, local iptables are configured to route the traffic to your local webserver running on {localhost or 127.0.0.1 or xyz.ab.cd.efg}:8080.