based on my limited understanding of the architecture, this approach should work to at least make the netmaker clients reachable from the VPC