A. The allowed section in the dispatcher configuration should only allow the publish instances private IPs

B. Set permission on the publish instance configurations Control Lists to allow the publish instance private IPs.

C. Set up client certificate authentication In the dispatcher configuration

D. Configure the .filter section of the dispatcher configuration with an allow rule to make sure the correct client's private IPs are allowed to flush the cache