Ingress filtering from an external cloud service to the internal network

[matt.torres at state.or.us (Torres, Matt)]

NANOG,
Thank you all. I have more than enough research to do now to further learn about everyone?s suggestions.
~Matt

>But if you at least had the freedom to put something like this:
>
>http://www.sproute.com/span
>
>in place or 20 other similar solutions. As in you do VPN, but right from the cloud instance itself or >another instance.  There is also a set of various solutions that do specialized metadata like Cilium, but >they get into container networking and that is definitely application redesign.