Don't update to 2.2.9.128 - disables reverse proxy - Update - Fix is out in 2.2.9.130

[ogiewon]

It appears that you can add additional IP address ranges via a web endpoint for more complex network scenarios, like yours. See the following post.

2.2.9 Security Enhancements?

Hub will accept incoming connections from private address IPs and subnets explicitly defined by using /hub/allowSubnets?123.123.123.0,124.124.124.0 endpoint. Here, query string is a comma separated list of /24 subnets. So yeah, it can accommodate more complex network setups. It's simple source IP filtering on the hub side.