Dear support, As Gluu stores user data, connects to other user repositories but also needs to process all sorts of incoming requests from the internet, it is an obvious target for attacks. What do you recommend from an architecture point of view? In more detail, can you explain the best practice regarding location of servers (dmz or not): maybe reverse proxies, load balancers, high availability Gluu servers and such? A diagram of the recommended setup would be much appreciated. We could not find one in the documentation. Regards, Hugo