RE: Ingress filtering from an external cloud service to the internal network

NANOG, Thank you all. I have more than enough research to do now to further learn about everyone’s suggestions. ~Matt

But if you at least had the freedom to put something like this:

http://www.sproute.com/span

in place or 20 other similar solutions. As in you do VPN, but right from the cloud instance itself or >another instance. There is also a set of various solutions that do specialized metadata like Cilium, but >they get into container networking and that is definitely application redesign.