recommend rack-protection for non-api server