Which seems to be doable (and fairly easy) as long as there's only one node acting as the ingress&egress gateway. At the moment that's not a problem for our adoption but in the future it might be