If I have two nodes that can ping each other, should't setting one node as ingress/egress allow traffic into private networks behind one of the nodes?