yea just needs to allow the nodes to talk to services running on the gateway, and maybe allow some other servers to talk to those nodes