To further clarify, even if you only had 1 host behind a proxy, you can create multiple listeners for that application on different ports or IP's. I do this fo

To further clarify, even if you only had 1 host behind a proxy, you can create multiple listeners for that application on different ports or IP's. I do this for a few of my servers to avoid fin-wait / time-wait assassination attacks. i.e. have apache listen on 127.0.0.* and set up ifcfg-lo-range with IPADDR_START=127.0.0.10 IPADDR_END=127.0.0.99 PREFIX=8 CLONENUM_START=10 Or have the server behind haproxy listen on a few hundred ports.