How should rewrites and redirects be designed for production in Ingress?

Keep rewrites explicit and minimal, test original path and forwarded headers, and prefer applications that understand their public base path.