Wouldnt you be locking this entire infra in a local network behind a firewall?