you would use egress gateways