See what I mean?
As if a proxy blindly passing traffic directly to a backend server "reduces attack surface" in any meaningful way. ๐
Edit: Guy edits his post with a bunch of stuff and assumes I've read it later. I can't eyeroll enough...
- You've increased your "attack surface" by adding a second application to the stack. Proxies aren't magic, they are also targets.
- Sure - you can do those things on a proxy. How many people here are? And why are those things never suggested when people here say "use a reverse proxy"? Because they think the proxy is the security.