Seek for advice for exposing keycloak for internet facing application (for internal staff use)

Getting advice
1

Hi All,

I need to expose the internal keycloak to internet for serving internet application (used by internal staff).

I plan to make use of a reverse proxy in DMZ to handle the incoming traffic and forward to intranet Keycloak.

I want to seek for your advice on the best practice for exposing keycloak for internet application, say for security / rate limit / reverse proxy recommendation (nginx? HAProxy?)…etc

Thank you.

2

Review the official docs:
[1] Configuring a reverse proxy - Keycloak
[2] Configuring Keycloak for production - Keycloak
[3] Multi-site deployments - Keycloak