I was referring to https://docs.nginx.com/nginx/admin-guide/security-controls/securing-http-traffic-upstream/ Posted at Nginx Forum: https://forum.nginx.org/read.php?2,293831,293832#msg-293832