The closest thing to a "best practice" is a tautology: allow your users to reach what they need.

Thanks to "cloud" nonsense and IPv4 exhaustion, a lot of public services are being run on...