Best practices in exposing HANA XS engine

We are planning to expose HANA XS engine to outside of the internal domain like in DMZ to utilize odata .What are the best practices you followed?

I looked at below post, it is bit old post.

Outbound httpS with HANA XS (part 1) - set up your HANA box to use SSL/TLS