Concept
A reverse proxy is used to avoid users from accessing the Nuxeo server directly. One simple rule you have to follow is that on a production setup, your Nuxeo server should never be exposed directly. Setting up a reverse proxy brings many benefits to performance and security aspects:
- HTTPS/SSL encryption
- HTTP caching
- URL rewriting


Additionally, when some clients use a WAN to access the server, the reverse proxy can be used to protect the server against slow connections that may use server-side resources for a long time. You may refer to the reverse proxy configuration for more details.
Recommendation
A reverse proxy to protect each Nuxeo server node (usually Apache or Nginx).
Going further