[mr_person]

As someone who designs load-balancer solutions for a living I cannot agree with this more.

I likewise assume that all servers are insecure, always, and we do not want them exposed without a sane load balancer layer.

Your server was probably not made to be exposed to the public internet. Do not expose it to the public internet.