So, something similar to this: https://wiki.jenkins-ci.org/display/JENKINS/Reverse+Proxy+Auth+Plugin

Basically the problem I am facing is that I want to host Phabricator on AWS. However our admins refuse to open firewall ports to a complete range of subnet from our domain controllers. For Jenkins, I plan to host a reverse proxy on-premise and use that plugin. However, Phabricator doesn't seem to have any authentication mechanism I can use to get around this problem.

( I have a cloud formation template that will take an EBS snapshot and RDS snapshot and create a "clone" of the existing phabricator. That's my plan for upgrading / changing configurations. That's why the IP will change quite frequently, and so I can't just ask the admins to change the firewall rules every time I change something. )

Please do let me know if I've missed anything. Much thanks.