I mean, to be fair to them somewhat, it is in their documentation and getting started guide. They highly recommend, in a production environment, to put a .Net Core web app behind a proxy because the Kestrel server engine is so new, every case is not handled yet. I'd hope, being Microsoft, that nobody just ignored that.