@rachel just last weekend got a gluetun container working on our isolated vlan/subnet, working on the cilium policy for that now