For incoming http(s) connections you can hide behind Cloudflare, which also helps for caching pictures. For outgoing connections to other instances you could also hide behind an outgoing proxy, in my opinion that’s not really necessary, but I’m sure others would disagree on that.