This appears to be a very secure setup. Is my thinking correct?
Since the backend IP's are hidden and if somehow access is gained to the Varnish servers any possible damage is minimal since there is no PHP code, etc. All they could possibly get is the IP of the backend servers?
[link][11 comments]