Sorry about the late reply. > Do you expose Netmaker bastion to the public Internet for all your VPC Yes > , where the bastion lives outside the VPC? No, bu

Sorry about the late reply. > Do you expose Netmaker bastion to the public Internet for all your VPC Yes > , where the bastion lives outside the VPC? No, but I imagine you're talking about Subnets? which in that case Yes. We run multiple Subnets. Only bastion machines live in public subnets while pretty much everything else is in private ones that routes via NATs.