# Seek for advice for exposing keycloak for internet facing application (for internal staff use) **URL:** \ **Category:** Getting advice\ **Created:** [July 23, 2025, 3:05am UTC](https://forum.keycloak.org/t/seek-for-advice-for-exposing-keycloak-for-internet-facing-application-for-internal-staff-use/30258 "2025-07-23T03:05:00Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![Ah.ping.luk](https://avatars.discourse-cdn.com/v4/letter/a/a9adbd/32.png) [@Ah.ping.luk](https://forum.keycloak.org/u/Ah.ping.luk)\ **Post date:** [July 23, 2025, 3:05am UTC](https://forum.keycloak.org/t/seek-for-advice-for-exposing-keycloak-for-internet-facing-application-for-internal-staff-use/30258/1 "2025-07-23T03:05:00Z")
Hi All, I need to expose the internal keycloak to internet for serving internet application (used by internal staff). I plan to make use of a reverse proxy in DMZ to handle the incoming traffic and forward to intranet Keycloak. I want to seek for your advice on the best practice for exposing keycloak for internet application, say for security / rate limit / reverse proxy recommendation (nginx? HAProxy?)…etc Thank you. ---
**Author:** ![embesozzi](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/embesozzi/32/12390_2.png) [@embesozzi](https://forum.keycloak.org/u/embesozzi)\ **Post date:** [July 25, 2025, 2:14pm UTC](https://forum.keycloak.org/t/seek-for-advice-for-exposing-keycloak-for-internet-facing-application-for-internal-staff-use/30258/2 "2025-07-25T14:14:45Z")
Review the official docs: [1] [Configuring a reverse proxy - Keycloak](https://www.keycloak.org/server/reverseproxy) [2] [Configuring Keycloak for production - Keycloak](https://www.keycloak.org/server/configuration-production) [3] [Multi-site deployments - Keycloak](https://www.keycloak.org/high-availability/introduction)