As someone who designs load-balancer solutions for a living I cannot agree with this more. I likewise assume that all servers are insecure, always, and we do n

As someone who designs load-balancer solutions for a living I cannot agree with this more. I likewise assume that all servers are insecure, always, and we do not want them exposed without a sane load balancer layer. Your server was probably not made to be exposed to the public internet. Do not expose it to the public internet.