Exposing an application server to the internet is not a good idea. It is always better to have a simple proxy that has absolute minimum set of software installe

Exposing an application server to the internet is not a good idea. It is always better to have a simple proxy that has absolute minimum set of software installed on it and let it to handle the requests coming from internet and forward them to the application server. With this kind of deployment, your attack surface will be much less and you will be protected from the bugs described in the article.